CVE-2025-39678 — NULL Pointer Dereference in Linux
Severity
5.5MEDIUMNVD
OSV3.2
EPSS
0.0%
top 97.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedSep 5
Latest updateApr 9
Description
In the Linux kernel, the following vulnerability has been resolved:
platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL
If metric table address is not allocated, accessing metrics_bin will
result in a NULL pointer dereference, so add a check.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6
Affected Packages5 packages
▶CVEListV5linux/linux5150542b8ec5fb561be080ed0ef3bab8598154c3 — 782977c0d8ba432b6fd3d5d0d87016a523ec1c69+3