CVE-2026-20731
published 2026-08-11CVE-2026-20731: Improper buffer restrictions for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software…
PriorityP426medium6.1CVSS 3.1
AVLACLPRLUINSUCNILAH
EPSS
0.10%
1.0th percentile
Improper buffer restrictions for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| intel | neural_processing_unit_driver | < 1.32.0 | 1.32.0 |
| intel | neural_processing_unit_driver | < 32.0.100.4723 | 32.0.100.4723 |
CVSS provenance
nvdv3.16.1MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
nvdv4.06.9MEDIUMCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vendor_redhat6.9MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Improper buffer restrictions for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service.
ghsa_unreviewed·2026-08-11
CVE-2026-20731 [MEDIUM] CWE-119 Improper buffer restrictions for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service.
Improper buffer restrictions for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Red Hat
intel-npu-driver: Intel NPU Driver: Denial of Service via Improper Buffer Restrictions
vendor_redhat·2026-08-11·CVSS 6.9
CVE-2026-20731 [MEDIUM] CWE-131 intel-npu-driver: Intel NPU Driver: Denial of Service via Improper Buffer Restrictions
intel-npu-driver: Intel NPU Driver: Denial of Service via Improper Buffer Restrictions
Improper buffer restrictions for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
A flaw was found in the Intel NPU Driver. Due t
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-20731 intel-npu-driver: Intel NPU Driver: Denial of Service via Improper Buffer Restrictions [fedora-all]
bugzilla·2026-08-20·CVSS 6.9
CVE-2026-20731 [MEDIUM] CVE-2026-20731 intel-npu-driver: Intel NPU Driver: Denial of Service via Improper Buffer Restrictions [fedora-all]
CVE-2026-20731 intel-npu-driver: Intel NPU Driver: Denial of Service via Improper Buffer Restrictions [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Improper buffer restrictions for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may i
Bugzilla
CVE-2026-20731 intel-npu-driver: Intel NPU Driver: Denial of Service via Improper Buffer Restrictions [epel-all]
bugzilla·2026-08-20·CVSS 6.9
CVE-2026-20731 [MEDIUM] CVE-2026-20731 intel-npu-driver: Intel NPU Driver: Denial of Service via Improper Buffer Restrictions [epel-all]
CVE-2026-20731 intel-npu-driver: Intel NPU Driver: Denial of Service via Improper Buffer Restrictions [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Improper buffer restrictions for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may imp
Bugzilla
CVE-2026-20731 intel-npu-driver: Intel NPU Driver: Denial of Service via Improper Buffer Restrictions
bugzilla·2026-08-11·CVSS 6.9
CVE-2026-20731 [MEDIUM] CVE-2026-20731 intel-npu-driver: Intel NPU Driver: Denial of Service via Improper Buffer Restrictions
CVE-2026-20731 intel-npu-driver: Intel NPU Driver: Denial of Service via Improper Buffer Restrictions
Improper buffer restrictions for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
2026-08-11
Published