Intel NPU Drivers Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in some Intel NPU Drivers for Linux and Windows. This issue arises from improper management of dynamically-controlled code resources, which may allow an unprivileged, authenticated user to disrupt service. The vulnerability requires local access and passive user interaction, and it could potentially lead to significant availability issues on the affected system.

Impact

Exploitation of this vulnerability can cause a denial-of-service condition, disrupting normal operations and availability of the affected system.

Remediation

Users are advised to update Intel NPU Driver for Linux to version 1.16.0 or later, and Intel NPU Driver for Windows to version 32.0.100.4023 or later. These updates are available on the Intel Linux NPU Driver GitHub releases page and the Intel Download Center, respectively.