CVE-2025-26402

MediumCVSS 6.5

Published: 11/11/2025(UTC)Updated: 19/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.14%

3th percentile - higher than 3% of all known CVEs

Summary

A protection mechanism failure in some Intel(R) NPU Drivers within user applications (Ring 3) may allow a denial of service. An authenticated attacker with low attack complexity can trigger it without user interaction.

Risk Assessment

An attacker could cause a denial of service, impacting system availability. Confidentiality and integrity are not affected.

Recommendation

Update Intel(R) NPU Drivers to the latest version. Monitor system availability and restrict local access to trusted users.

Other vulnerabilities in Intel(R) NPU Drivers

CVE-2025-26405Medium
Improper control of dynamically-managed code resources in Intel(R) NPU Drivers within Ring 3: User Applications may allow a denial of service. An unprivileged authenticated user with a low-complexity attack can cause a denial of service via local access, requiring passive user interaction.

Original NVD description (English source)

Protection mechanism failure for some Intel(R) NPU Drivers within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS