In the Linux kernel, the following vulnerability has been resolved: HID: ignore non-functional sensor in HP 5MP Camera The HP 5MP Camera (USB ID 0408:5473) reports a HID sensor interface that is not actually implemented. Attempting to access this non-functional sensor via iio_info causes system hangs as runtime PM tries to wake up an unresponsive sensor. [453] hid-sensor-hub 0003:0408:5473.0003: Report latency attributes: ffffffff:ffffffff [453] hid-sensor-hub 0003:0408:5473.0003: common attributes: 5:1, 2:1, 3:1 ffffffff:ffffffff Add this device to the HID ignore list since the sensor interface is non-functional by design and should not be exposed to userspace.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

No data.

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/007a849126ef7907761af6a1379400558a72e703 cve-icon cve-icon
https://git.kernel.org/stable/c/363236d709e75610b628c2a4337ccbe42e454b6d cve-icon cve-icon
https://git.kernel.org/stable/c/6ca3d4d87af406a390a34ea924ab65c517e6e132 cve-icon cve-icon
https://git.kernel.org/stable/c/7a7ada33879a631b05b536e66d1c5b1219d3bade cve-icon cve-icon
https://git.kernel.org/stable/c/920ea73215dbf948b661b88a79cb47b7f96adfbd cve-icon cve-icon
https://git.kernel.org/stable/c/9acdb0059fb6b82158e15adae91e629cb5974564 cve-icon cve-icon
https://git.kernel.org/stable/c/9af297aea8f76a0ad21f2de5f2cd6401a748b9c3 cve-icon cve-icon
https://git.kernel.org/stable/c/b6c6c2d8ab4932e5d6d439f514276cb3d257b8fe cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025040257-CVE-2025-21992-3985@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-21992 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-21992 cve-icon
History

Thu, 10 Apr 2025 15:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-20
Metrics threat_severity

Moderate

 threat_severity

Low

Thu, 10 Apr 2025 13:15:00 +0000

Type Values Removed Values Added
References

Fri, 04 Apr 2025 02:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Wed, 02 Apr 2025 13:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: HID: ignore non-functional sensor in HP 5MP Camera The HP 5MP Camera (USB ID 0408:5473) reports a HID sensor interface that is not actually implemented. Attempting to access this non-functional sensor via iio_info causes system hangs as runtime PM tries to wake up an unresponsive sensor. [453] hid-sensor-hub 0003:0408:5473.0003: Report latency attributes: ffffffff:ffffffff [453] hid-sensor-hub 0003:0408:5473.0003: common attributes: 5:1, 2:1, 3:1 ffffffff:ffffffff Add this device to the HID ignore list since the sensor interface is non-functional by design and should not be exposed to userspace.
Title HID: ignore non-functional sensor in HP 5MP Camera
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-04-02T12:53:14.833Z

Updated: 2025-05-04T07:26:51.641Z

Reserved: 2024-12-29T08:45:45.800Z

Link: CVE-2025-21992

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-04-02T13:15:43.800

Modified: 2025-04-10T13:15:49.053

Link: CVE-2025-21992

cve-icon Redhat

Severity : Low

Publid Date: 2025-04-02T00:00:00Z

Links: CVE-2025-21992 - Bugzilla