{"id":"CVE-2026-68993","kind":"vulnerability","aliases":["CVE-2026-68993"],"related":[],"title":"NPU driver: double free from improper pointer management could let attackers run code","description":"A double free vulnerability in NPU driver due to improper pointer management  (940)","summary":"A double free flaw in an NPU (neural processing unit) driver is reported, with the bug caused by improper pointer management. The sources do not state what an attacker can gain beyond the memory corruption class of bug.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["device-driver","infrastructure","npu-driver"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-05T03:17:31+00:00","first_seen_at":"2026-11-05T03:31:44+00:00","triaged_at":"2026-11-05T03:33:39+00:00","updated_at":"2026-11-05T03:33:39+00:00","category":"infrastructure","confidence":0.2,"triage":{"at":"2026-11-05T03:33:39Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"NPU driver: double free from improper pointer management could let attackers run code","impact":"medium","summary":"A double free flaw in an NPU (neural processing unit) driver is reported, with the bug caused by improper pointer management. The sources do not state what an attacker can gain beyond the memory corruption class of bug.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["npu-driver","device-driver"],"confidence":0.2,"fix_status":"unknown","needs_auth":"unknown","worst_case":"unknown; memory corruption in a driver, impact not stated","analyst_note":"Find the vendor and affected NPU driver versions and the NVD entry details at https://nvd.nist.gov/vuln/detail/CVE-2026-68993.","how_to_check":"unknown","plain_action":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000601,"input_tokens":4131,"output_tokens":375,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':15A,18A '-68993':16A,19A '940':77C 'attack':11A,55B 'beyond':58B 'bug':42B,64B 'caus':43B 'class':62B 'code':13A 'corrupt':61B 'could':9A 'cve':14A,17A 'devic':21B 'device-driv':20B 'doubl':3A,28B,66C 'driver':2A,22B,26B,37B,71C 'due':72C 'flaw':30B 'free':4A,29B,67C 'gain':57B 'improp':6A,45B,74C 'infrastructur':23B 'let':10A 'manag':8A,47B,76C 'memori':60B 'neural':34B 'npu':1A,25B,33B,70C 'npu-driv':24B 'pointer':7A,46B,75C 'process':35B 'report':39B 'run':12A 'sourc':49B 'state':52B 'unit':36B 'vulner':68C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["devicedriver","infrastructure","npudriver","unknown"],"campaign_type":null,"first_public_at":"2026-11-05T03:17:31+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-68993","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68993","severity":null,"published_at":"2026-11-05T03:17:31+00:00","modified_at":"2026-11-05T03:17:31+00:00","first_seen_at":"2026-11-05T03:31:44+00:00","fetched_at":"2026-11-05T03:31:44+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}