CVE catalog

CVE-2025-26405

firmware-nonfree: CVE-2025-26405

Severity: Medium · CVSS 5.1CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Published: Nov 11, 2025, 5:15:44 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.13% · Oct 25, 2026

Improper control of dynamically-managed code resources for some Intel(R) NPU Drivers within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	firmware-nonfree	sid	`20260916-1`	fixed
Debian	firmware-nonfree	forky	`20260916-1`	fixed
Debian	firmware-nonfree	trixie	`20250410-2`	fixed
Debian	firmware-nonfree	bookworm	`20230210-5`	not affected

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	firmware-nonfree	source	sid	`20250410-1`	not yet assigned	Not reported	Not reported
Debian	firmware-nonfree	source	forky	`20250410-1`	not yet assigned	Not reported	Not reported
Debian	firmware-nonfree	source	trixie	`20250410-1`	not yet assigned	Not reported	Not reported
Debian	firmware-nonfree	source	bookworm	`Not affected`	unimportant	Not reported	Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[firmware-amd-graphics]Not affected
Source package: [firmware-nonfree]
Details (2)
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
[firmware-atheros]Not affected
Source package: [firmware-nonfree]
Details (2)
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
[firmware-bnx2]Not affected
Source package: [firmware-nonfree]
Details (2)
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
[firmware-bnx2x]Not affected
Source package: [firmware-nonfree]
Details (2)
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
[firmware-brcm80211]Not affected
Source package: [firmware-nonfree]
Details (2)
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
[firmware-cavium]Not affected
Source package: [firmware-nonfree]
Details (2)
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
[firmware-intel-sound]Not affected
Source package: [firmware-nonfree]
Details (2)
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
[firmware-ipw2x00]Not affected
Source package: [firmware-nonfree]
Details (2)
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
[firmware-ivtv]Not affected
Source package: [firmware-nonfree]
Details (2)
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
[firmware-iwlwifi]Not affected
Source package: [firmware-nonfree]
Details (2)
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
[firmware-libertas]Not affected
Source package: [firmware-nonfree]
Details (2)
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
[firmware-linux]Not affected
Source package: [firmware-nonfree]
Details (2)
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
[firmware-linux-nonfree]Not affected
Source package: [firmware-nonfree]
Details (2)
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
[firmware-misc-nonfree]Not affected
Source package: [firmware-nonfree]
Details (2)
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
[firmware-myricom]Not affected
Source package: [firmware-nonfree]
Details (2)
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
[firmware-netronome]Not affected
Source package: [firmware-nonfree]
Details (2)
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
[firmware-netxen]Not affected
Source package: [firmware-nonfree]
Details (2)
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
[firmware-qcom-media]Not affected
Source package: [firmware-nonfree]
Details (2)
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
[firmware-qcom-soc]Not affected
Source package: [firmware-nonfree]
Details (2)
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
[firmware-qlogic]Not affected
Source package: [firmware-nonfree]
Details (2)
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm
- 20230210-5 · all · bookworm
  Not affected
  dsa · firmware-nonfree · debian · bookworm

Next results

Observed: Oct 24, 2026, 4:51:37 PM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database]