CVE-2025-21992

Summary

In the Linux kernel, the following vulnerability has been resolved:

HID: ignore non-functional sensor in HP 5MP Camera

The HP 5MP Camera (USB ID 0408:5473) reports a HID sensor interface that is not actually implemented. Attempting to access this non-functional sensor via iio_info causes system hangs as runtime PM tries to wake up an unresponsive sensor.

[453] hid-sensor-hub 0003:0408:5473.0003: Report latency attributes: ffffffff:ffffffff [453] hid-sensor-hub 0003:0408:5473.0003: common attributes: 5:1, 2:1, 3:1 ffffffff:ffffffff

Add this device to the HID ignore list since the sensor interface is non-functional by design and should not be exposed to userspace.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxe04955db6a7c3fc4a1e6978649b61a6f5f8028e3 < 7a7ada33879a631b05b536e66d1c5b1219d3badeaffected
LinuxLinuxe04955db6a7c3fc4a1e6978649b61a6f5f8028e3 < 6ca3d4d87af406a390a34ea924ab65c517e6e132affected
LinuxLinuxe04955db6a7c3fc4a1e6978649b61a6f5f8028e3 < 920ea73215dbf948b661b88a79cb47b7f96adfbdaffected
LinuxLinuxe04955db6a7c3fc4a1e6978649b61a6f5f8028e3 < 363236d709e75610b628c2a4337ccbe42e454b6daffected
LinuxLinux6.3affected
LinuxLinux0 < 6.3unaffected
LinuxLinux6.6.84 <= 6.6.*unaffected
LinuxLinux6.12.20 <= 6.12.*unaffected
LinuxLinux6.13.8 <= 6.13.*unaffected
LinuxLinux6.14 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

References