---
id: CVE-2025-39678
title: 'platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL

  If metric table address is not allocated, accessing metrics_bin will
  result in a NULL pointer dereferen…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 5150542b8ec5fb561be080ed0ef3bab8598154c3 <
    782977c0d8ba432b6fd3d5d0d87016a523ec1c69
  - >-
    Linux >= 5150542b8ec5fb561be080ed0ef3bab8598154c3 <
    d47782d5c0cb87b9826041f34505580204ccf703
  - >-
    Linux >= 5150542b8ec5fb561be080ed0ef3bab8598154c3 <
    2c78fb287e1f430b929f2e49786518350d15605c
  - Linux 6.7
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T21:08:29.883660Z'
published: '2025-09-05'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:12:54.994Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-39678'
references:
  - url: 'https://git.kernel.org/stable/c/782977c0d8ba432b6fd3d5d0d87016a523ec1c69'
  - url: 'https://git.kernel.org/stable/c/d47782d5c0cb87b9826041f34505580204ccf703'
  - url: 'https://git.kernel.org/stable/c/2c78fb287e1f430b929f2e49786518350d15605c'
tags:
  - cve.org
epss: 0.00164
epssPercentile: 0.05605
ingestedAt: '2026-11-05T22:38:32.019Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL

If metric table address is not allocated, accessing metrics_bin will
result in a NULL pointer dereference, so add a check.

## Affected

- `Linux >= 5150542b8ec5fb561be080ed0ef3bab8598154c3 < 782977c0d8ba432b6fd3d5d0d87016a523ec1c69`
- `Linux >= 5150542b8ec5fb561be080ed0ef3bab8598154c3 < d47782d5c0cb87b9826041f34505580204ccf703`
- `Linux >= 5150542b8ec5fb561be080ed0ef3bab8598154c3 < 2c78fb287e1f430b929f2e49786518350d15605c`
- `Linux 6.7`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.