CVE-2025-21992: HID: ignore non-functional sensor in HP 5MP Camera
In the Linux kernel, the following vulnerability has been resolved:
HID: ignore non-functional sensor in HP 5MP Camera
The HP 5MP Camera (USB ID 0408:5473) reports a HID sensor interface that is not actually implemented. Attempting to access this non-functional sensor via iioinfo causes system hangs as runtime PM tries to wake up an unresponsive sensor.
[453] hid-sensor-hub 0003:0408:5473.0003: Report latency attributes: ffffffff:ffffffff [453] hid-sensor-hub 0003:0408:5473.0003: common attributes: 5:1, 2:1, 3:1 ffffffff:ffffffff
Add this device to the HID ignore list since the sensor interface is non-functional by design and should not be exposed to userspace.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21992?
CVE-2025-21992 has a low severity rating as it involves a non-functional sensor in the HP 5MP Camera.
How do I fix CVE-2025-21992?
To fix CVE-2025-21992, ensure that you are using an updated version of the Linux kernel that addresses this vulnerability.
What systems are affected by CVE-2025-21992?
CVE-2025-21992 affects the HP 5MP Camera and the Linux kernel.
What is the nature of the vulnerability CVE-2025-21992?
The vulnerability CVE-2025-21992 involves the reporting of a non-functional HID sensor interface in the HP 5MP Camera.
Is CVE-2025-21992 a critical vulnerability?
No, CVE-2025-21992 is not considered a critical vulnerability as it does not lead to severe exploitation scenarios.