---
id: "CVE-2026-68993"
kind: "vulnerability"
aliases: ["CVE-2026-68993"]
title: "NPU driver: double free from improper pointer management could let attackers run code"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["device-driver", "infrastructure", "npu-driver"]
not_affected_if: []
published_at: "2026-11-05T03:17:31+00:00"
first_seen_at: "2026-11-05T03:31:44+00:00"
updated_at: "2026-11-05T03:33:39+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68993", "first_seen_at": "2026-11-05T03:31:44+00:00"}]
exploit_sources: []
---

# NPU driver: double free from improper pointer management could let attackers run code

A double free flaw in an NPU (neural processing unit) driver is reported, with the bug caused by improper pointer management. The sources do not state what an attacker can gain beyond the memory corruption class of bug.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-05T03:31:44+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-68993

## From the sources

A double free vulnerability in NPU driver due to improper pointer management  (940)

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_