This vulnerability involves improper conditions checks in the firmware of the Intel(R) NPU Driver at Ring 1 privilege level. An unprivileged but authenticated local adversary can exploit this flaw with low complexity to cause a denial of service condition. The vulnerability does not require special internal knowledge or user interaction, and it primarily affects system availability. The CVSS 4.0 base score is 6.9, reflecting medium severity with local attack vector, low attack complexity, and no user interaction required. No vendor advisory or patch information is provided, and no known exploits are reported in the wild.

The vulnerability allows an unprivileged authenticated local user to cause denial of service, impacting system availability (high impact). There is low impact on system integrity and no impact on confidentiality. The denial of service could disrupt normal operation of the Intel NPU Driver and potentially affect dependent system functions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to trusted users and monitor for unusual system behavior related to the Intel NPU Driver. No official remediation or temporary fix has been published at this time.