CVE-2026-20783
published 2026-08-11CVE-2026-20783: Improper conditions check in the firmware for the Intel(R) NPU Driver for all versions within Ring 1: Device Drivers may allow a denial of service…
PriorityP426medium6.1CVSS 3.1
AVLACLPRLUINSUCNILAH
EPSS
0.10%
1.0th percentile
Improper conditions check in the firmware for the Intel(R) NPU Driver for all versions within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| intel | neural_processing_unit_driver | < 1.32.0 | 1.32.0 |
| intel | neural_processing_unit_driver | < 32.0.100.4723 | 32.0.100.4723 |
CVSS provenance
nvdv3.16.1MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
nvdv4.06.9MEDIUMCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vendor_redhat6.9MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
intel-npu-driver: Intel NPU Driver: Denial of Service via improper conditions check
vendor_redhat·2026-08-11·CVSS 6.9
CVE-2026-20783 [MEDIUM] CWE-606 intel-npu-driver: Intel NPU Driver: Denial of Service via improper conditions check
intel-npu-driver: Intel NPU Driver: Denial of Service via improper conditions check
Improper conditions check in the firmware for the Intel(R) NPU Driver for all versions within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
A flaw was found in the Intel NPU Driver
GHSA
Improper conditions check in the firmware for the Intel(R) NPU Driver for all versions within Ring 1: Device Drivers may allow a denial of service.
ghsa_unreviewed·2026-08-11
CVE-2026-20783 [MEDIUM] CWE-754 Improper conditions check in the firmware for the Intel(R) NPU Driver for all versions within Ring 1: Device Drivers may allow a denial of service.
Improper conditions check in the firmware for the Intel(R) NPU Driver for all versions within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-20783 intel-npu-driver: Intel NPU Driver: Denial of Service via improper conditions check [fedora-all]
bugzilla·2026-08-20·CVSS 6.9
CVE-2026-20783 [MEDIUM] CVE-2026-20783 intel-npu-driver: Intel NPU Driver: Denial of Service via improper conditions check [fedora-all]
CVE-2026-20783 intel-npu-driver: Intel NPU Driver: Denial of Service via improper conditions check [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Improper conditions check in the firmware for the Intel(R) NPU Driver for all versions within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerabilit
Bugzilla
CVE-2026-20783 intel-npu-driver: Intel NPU Driver: Denial of Service via improper conditions check [epel-all]
bugzilla·2026-08-20·CVSS 6.9
CVE-2026-20783 [MEDIUM] CVE-2026-20783 intel-npu-driver: Intel NPU Driver: Denial of Service via improper conditions check [epel-all]
CVE-2026-20783 intel-npu-driver: Intel NPU Driver: Denial of Service via improper conditions check [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Improper conditions check in the firmware for the Intel(R) NPU Driver for all versions within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability
Bugzilla
CVE-2026-20783 intel-npu-driver: Intel NPU Driver: Denial of Service via improper conditions check
bugzilla·2026-08-11·CVSS 6.9
CVE-2026-20783 [MEDIUM] CVE-2026-20783 intel-npu-driver: Intel NPU Driver: Denial of Service via improper conditions check
CVE-2026-20783 intel-npu-driver: Intel NPU Driver: Denial of Service via improper conditions check
Improper conditions check in the firmware for the Intel(R) NPU Driver for all versions within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
2026-08-11
Published