{"id":"CVE-2025-39678","title":"platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL\n\nIf metric table address is not allocated, accessing metrics_bin will\nresult in a NULL pointer dereferen…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 5150542b8ec5fb561be080ed0ef3bab8598154c3 < 782977c0d8ba432b6fd3d5d0d87016a523ec1c69","Linux >= 5150542b8ec5fb561be080ed0ef3bab8598154c3 < d47782d5c0cb87b9826041f34505580204ccf703","Linux >= 5150542b8ec5fb561be080ed0ef3bab8598154c3 < 2c78fb287e1f430b929f2e49786518350d15605c","Linux 6.7"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T21:08:29.883660Z"},"published":"2025-09-05","updated":"2026-11-05","sourceUpdated":"2026-11-05T21:12:54.994Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-39678","references":[{"url":"https://git.kernel.org/stable/c/782977c0d8ba432b6fd3d5d0d87016a523ec1c69"},{"url":"https://git.kernel.org/stable/c/d47782d5c0cb87b9826041f34505580204ccf703"},{"url":"https://git.kernel.org/stable/c/2c78fb287e1f430b929f2e49786518350d15605c"}],"tags":["cve.org"],"epss":0.00164,"epssPercentile":0.05605,"ingestedAt":"2026-11-05T22:38:32.019Z","slug":"CVE-2025-39678","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL\n\nIf metric table address is not allocated, accessing metrics_bin will\nresult in a NULL pointer dereference, so add a check.\n\n## Affected\n\n- `Linux >= 5150542b8ec5fb561be080ed0ef3bab8598154c3 < 782977c0d8ba432b6fd3d5d0d87016a523ec1c69`\n- `Linux >= 5150542b8ec5fb561be080ed0ef3bab8598154c3 < d47782d5c0cb87b9826041f34505580204ccf703`\n- `Linux >= 5150542b8ec5fb561be080ed0ef3bab8598154c3 < 2c78fb287e1f430b929f2e49786518350d15605c`\n- `Linux 6.7`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}