CVE-2025-37761

A flaw was found in the Linux kernel's drm/xe component. This vulnerability allows a local attacker to cause a denial of service or information disclosure via an out-of-bounds shift during TLB invalidation.

This vulnerability is rated as Moderate because it requires a local authenticated user to interact with the Intel Xe graphics driver on systems equipped with supported Intel GPU hardware. The flaw occurs during large-range translation lookaside buffer invalidation operations, which can trigger an invalid shift operation and cause kernel instability or information disclosure. Systems without compatible Intel graphics hardware or configurations where the Xe driver is not loaded are unaffected, limiting the overall attack surface.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.