Intel NPU Drivers Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in some Intel NPU Drivers for both Linux and Windows. The issue arises from improper condition checks in the firmware, which may allow an unprivileged software adversary with an authenticated user to disrupt service. This vulnerability can potentially be exploited through local access, without special internal knowledge, and requires no user interaction. The vulnerability has a low impact on system integrity and none on confidentiality, but a high impact on availability.

Impact

Exploitation of this vulnerability can lead to a denial-of-service condition, causing the system to become unresponsive or unavailable.

Remediation

Users are advised to update the Intel NPU Driver for Linux to version 1.26.0 or later. For Windows, the driver should be updated to version 32.0.100.4511 or later. These updates are available for download from the Intel Linux NPU Driver Releases page and the Intel Download Center, respectively.