vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2025-21992

HID: ignore non-functional sensor in HP 5MP Camera

MEDIUM
5.5
CVSS Score
Published: April 2, 2025 at 12:53 PM UTC
Updated: June 17, 2026 at 08:44 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: HID: ignore non-functional sensor in HP 5MP Camera The HP 5MP Camera (USB ID 0408:5473) reports a HID sensor interface that is not actually implemented. Attempting to access this non-functional sensor via iio_info causes system hangs as runtime PM tries to wake up an unresponsive sensor. [453] hid-sensor-hub 0003:0408:5473.0003: Report latency attributes: ffffffff:ffffffff [453] hid-sensor-hub 0003:0408:5473.0003: common attributes: 5:1, 2:1, 3:1 ffffffff:ffffffff Add this device to the HID ignore list since the sensor interface is non-functional by design and should not be exposed to userspace.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
v < 5.4.2925.11 ≤ v < 5.15.1805.16 ≤ v < 6.1.1325.5 ≤ v < 5.10.2366.13 ≤ v < 6.13.86.2 ≤ v < 6.6.846.3 ≤ v < 6.12.206.3 ≤ v < 6.13.86.3 ≤ v < 6.146.3 ≤ v < 6.6.846.7 ≤ v < 6.12.206.14 rc16.14 rc26.3e04955db6a7c3fc4a1e6978649b61a6f5f8028e3
Vendor states this is fixed in 363236d709e75610b628c2a4337ccbe42e454b6d (fixed)
Vendor states this is fixed in 6ca3d4d87af406a390a34ea924ab65c517e6e132 (fixed)
Vendor states this is fixed in 7a7ada33879a631b05b536e66d1c5b1219d3bade (fixed)
Vendor states this is fixed in 920ea73215dbf948b661b88a79cb47b7f96adfbd (fixed)
Vendor states this is fixed in 6.12.20 (unaffected)
Vendor states this is fixed in 6.13.8 (unaffected)
Vendor states this is fixed in 6.14 (unaffected)
Vendor states this is fixed in 6.3 (unaffected)
Vendor states this is fixed in 6.6.84 (unaffected)

References (10)

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/007a849126ef7907761af6a1379400558a72e703
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/363236d709e75610b628c2a4337ccbe42e454b6d
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/6ca3d4d87af406a390a34ea924ab65c517e6e132
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/7a7ada33879a631b05b536e66d1c5b1219d3bade
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/920ea73215dbf948b661b88a79cb47b7f96adfbd
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/9acdb0059fb6b82158e15adae91e629cb5974564
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/9af297aea8f76a0ad21f2de5f2cd6401a748b9c3
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/b6c6c2d8ab4932e5d6d439f514276cb3d257b8fe

CVSS

5.5MEDIUM[email protected]
Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card