Multiple Denial of Service Vulnerabilities in Dell Intel NPU Driver

Multiple vulnerabilities have been identified in the Intel NPU driver for Dell computer systems. These flaws, which include CVE-2024-38600, stem from insufficient input validation within the driver component. A local attacker with low-privilege access to an affected machine can exploit these vulnerabilities to trigger a system crash, resulting in a denial of service (DoS) state. Because the issue resides in the kernel-mode driver, successful exploitation results in the destabilization of the NPU service, potentially requiring a system reboot to restore functionality. Defender teams should prioritize the application of vendor-supplied driver updates to mitigate the risk of local instability and service disruption.

Impact

Successful exploitation of these vulnerabilities leads to a denial of service state, where the NPU driver fails or causes the host system to become unresponsive. This impacts users running Dell hardware equipped with Intel NPU capabilities. While the exploitation requires local access, it poses a risk to system availability in shared environments or on machines where non-administrator users have successfully compromised a local account.

Recommendation

Prioritize the deployment of updated Dell Intel NPU driver software. Use your enterprise endpoint management solution to identify devices running vulnerable driver versions and distribute the patch provided by Dell.