Intel NPU Drivers Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in some Intel NPU Drivers for Linux and Windows. The issue arises from improper condition checks in the firmware, which may allow unprivileged software adversaries with authenticated user status to disrupt service. This vulnerability can potentially be exploited through local access, without special internal knowledge, and requires no user interaction. The flaw significantly impacts the availability of the affected system.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing a significant disruption in system availability.

Remediation

Users are advised to update the Intel NPU Driver for Linux to version 1.24.0 or later. For Windows, the driver should be updated to version 32.0.100.4297 or later. These updates are available on the Intel Download Center and the Intel GitHub repository for Linux NPU Drivers.