CVE-2026-20769
MediumCVSS 6.9Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
Improper conditions check in Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. The attack requires an authenticated user, low complexity, and local access, with no user interaction. The vulnerability impacts integrity (low) and availability (high), but not confidentiality.
Risk Assessment
Denial of service may disrupt systems using NPUs, potentially affecting service availability. Authentication is required, which limits the risk, but it remains a threat.
Recommendation
It is recommended to update the Intel NPU Driver to the latest version with fixes. Also, monitor systems for unusual NPU-related events.
Original NVD description (English source)
Improper conditions check for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.