- Vulnerability/
- CVE-2025-21992
CVE-2025-21992: HID: ignore non-functional sensor in HP 5MP Camera
First published: Wed Apr 02 2025(Updated: )
In the Linux kernel, the following vulnerability has been resolved: HID: ignore non-functional sensor in HP 5MP Camera The HP 5MP Camera (USB ID 0408:5473) reports a HID sensor interface that is not actually implemented. Attempting to access this non-functional sensor via iio_info causes system hangs as runtime PM tries to wake up an unresponsive sensor. [453] hid-sensor-hub 0003:0408:5473.0003: Report latency attributes: ffffffff:ffffffff [453] hid-sensor-hub 0003:0408:5473.0003: common attributes: 5:1, 2:1, 3:1 ffffffff:ffffffff Add this device to the HID ignore list since the sensor interface is non-functional by design and should not be exposed to userspace.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| HP 5MP Camera | ||
| Linux Kernel |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/9acdb0059fb6b82158e15adae91e629cb5974564
- https://git.kernel.org/stable/c/7a7ada33879a631b05b536e66d1c5b1219d3bade
- https://git.kernel.org/stable/c/6ca3d4d87af406a390a34ea924ab65c517e6e132
- https://git.kernel.org/stable/c/920ea73215dbf948b661b88a79cb47b7f96adfbd
- https://git.kernel.org/stable/c/363236d709e75610b628c2a4337ccbe42e454b6d
Frequently Asked Questions
What is the severity of CVE-2025-21992?
CVE-2025-21992 has a low severity rating as it involves a non-functional sensor in the HP 5MP Camera.
How do I fix CVE-2025-21992?
To fix CVE-2025-21992, ensure that you are using an updated version of the Linux kernel that addresses this vulnerability.
What systems are affected by CVE-2025-21992?
CVE-2025-21992 affects the HP 5MP Camera and the Linux kernel.
What is the nature of the vulnerability CVE-2025-21992?
The vulnerability CVE-2025-21992 involves the reporting of a non-functional HID sensor interface in the HP 5MP Camera.
Is CVE-2025-21992 a critical vulnerability?
No, CVE-2025-21992 is not considered a critical vulnerability as it does not lead to severe exploitation scenarios.
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/title
- agent/description
- agent/type
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- agent/source
- agent/last-modified-date
- agent/author
- agent/event
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/hp
- canonical/hp 5mp camera
- vendor/linux
- canonical/linux kernel