Loading vulnerability…
CVE-2025-37761 is an incorrect bitwise-shift vulnerability in the Linux kernel DRM Xe driver's TLB-range invalidation path. When the invalidated range length exceeds rounddown_pow_of_two(ULONG_MAX), xe_gt_tlb_invalidation_range can invoke roundup_pow_of_two(length) with a value that causes an invalid shift count. On 64-bit systems, this manifests as a shift exponent of 64 applied to an unsigned long. The corrected logic defines an upper range-size limit and performs a full TLB invalidation rather than calculating a rounded power-of-two range for oversized invalidations.
Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.
What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
If you can’t patch tonight, do this now.
Patch, then assume compromise.
No public exploits tracked yet. Mallory keeps watching.
No public exploit code observed for this vulnerability.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
Vendor-confirmed product mapping. Mallory continuously reconciles this list against your asset inventory.
4 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
An out-of-bounds shift flaw in the Linux kernel DRM Xe graphics driver TLB-range invalidation logic. An exceptionally large invalidation range can cause roundup_pow_of_two(length) to perform an invalid 64-bit shift; the remediation switches to full TLB invalidation above a defined range-size limit.
A Linux kernel drm/xe vulnerability caused by an out-of-bounds shift during TLB invalidation.
Linux kernel drm/xe out-of-bounds shift vulnerability during TLB invalidation.
Query your assets running an affected version, and investigate the blast radius.
Every observed campaign linking this CVE to a named adversary.
Malware families riding this exploit, with evidence and IOCs.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Cross-references every affected SKU, including bundled OEM variants.
Community discussion across Reddit, Mastodon, and other social sources.