PT-2025-46403 · Intel+1 · Intel(R) Npu Drivers+1

Published 2025-11-11 · Updated 2025-11-11 · CVE-2025-26405

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) NPU Drivers (affected versions not specified)

Description An issue exists in some Intel(R) NPU Drivers within Ring 3 where improper control of dynamically-managed code resources can lead to a denial of service. An unprivileged software adversary with an authenticated user and a low complexity attack may enable this denial of service. The issue may occur via local access when attack requirements are not present, without special internal knowledge, and requires passive user interaction. The potential impact to the system includes high availability disruption, potentially leading to subsequent confidentiality and integrity impacts.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-913

Related Identifiers

CVE-2025-26405

Affected Products

Debian

Intel(R) Npu Drivers

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-26405 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-26405 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-26405 · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01304.html · Note
• https://twitter.com/CVEnew/status/1988303477886644627 · Twitter Post