PT-2025-36273 · Hsmp +1 · Hsmp +1

Published 2025-09-05 · Updated 2025-09-06 · CVE-2025-39678

Positive Technologies · (AI Summary)

Name of the Vulnerable Software and Affected Versions:

Linux kernel (affected versions not specified)

Description:

A flaw exists in the Linux kernel related to the handling of metric table addresses within the `hsmp` module. Specifically, a missing check for a null pointer in `sock->metric tbl addr` can lead to a NULL pointer dereference when accessing metrics data. This occurs if the metric table address has not been allocated.

Recommendations:

At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2025-39678

Affected Products

Linux Kernel

Hsmp

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-39678 · Security Note
• https://twitter.com/CVEnew/status/1964195475051176236 · Twitter Post
• https://git.kernel.org/stable/c/2c78fb287e1f430b929f2e49786518350d15605c · Note
• https://git.kernel.org/stable/c/d47782d5c0cb87b9826041f34505580204ccf703 · Note