CVE-2025-38540

HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras

MEDIUM

5.5

CVSS Score

Published: August 16, 2025 at 11:22 AM UTC

Updated: June 17, 2026 at 09:17 AM UTC

2 products affected across 2 vendorsLinux KernelDebian Linux

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras The Chicony Electronics HP 5MP Cameras (USB ID 04F2:B824 & 04F2:B82C) report a HID sensor interface that is not actually implemented. Attempting to access this non-functional sensor via iio_info causes system hangs as runtime PM tries to wake up an unresponsive sensor. Add these 2 devices to the HID ignore list since the sensor interface is non-functional by design and should not be exposed to userspace.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Debian Linux · Debiandrupal

95%

11.0

Linux Kernel · Linux

95%

3.8 ≤ v < 5.10.2403.8 ≤ v < 5.15.1893.8 ≤ v < 5.4.2963.8 ≤ v < 6.1.1463.8 ≤ v < 6.12.393.8 ≤ v < 6.15.73.8 ≤ v < 6.163.8 ≤ v < 6.6.995.11 ≤ v < 5.15.1895.16 ≤ v < 6.1.1465.5 ≤ v < 5.10.2406.13 ≤ v < 6.15.76.2 ≤ v < 6.6.996.7 ≤ v < 6.12.393.8 6.16 rc1 6.16 rc2 6.16 rc383499b52c61f50292f0aae36499de8a8fc3e37c3

Vendor states this is fixed in 1b297ab6f38ca60a4ca7298b297944ec6043b2f4 (fixed)

Vendor states this is fixed in 2b0931eee48208c25bb77486946dea8e96aa6a36 (fixed)

Vendor states this is fixed in 35f1a5360ac68d9629abbb3930a0a07901cba296 (fixed)

Vendor states this is fixed in 3ce1d87d1f5d80322757aa917182deb7370963b9 (fixed)

Vendor states this is fixed in 54bae4c17c11688339eb73a04fd24203bb6e7494 (fixed)

Vendor states this is fixed in 7ac00f019698f614a49cce34c198d0568ab0e1c2 (fixed)

Vendor states this is fixed in a2a91abd19c574b598b1c69ad76ad9c7eedaf062 (fixed)

Vendor states this is fixed in c72536350e82b53a1be0f3bfdf1511bba2827102 (fixed)

Vendor states this is fixed in 3.8 (unaffected)

Vendor states this is fixed in 5.10.240 (unaffected)

Vendor states this is fixed in 5.15.189 (unaffected)

Vendor states this is fixed in 5.4.296 (unaffected)