CVE-2025-21992

Medium

Description

In the Linux kernel, the following vulnerability has been resolved: HID: ignore non-functional sensor in HP 5MP Camera The HP 5MP Camera (USB ID 0408:5473) reports a HID sensor interface that is not actually implemented. Attempting to access this non-functional sensor via iio_info causes system hangs as runtime PM tries to wake up an unresponsive sensor. [453] hid-sensor-hub 0003:0408:5473.0003: Report latency attributes: ffffffff:ffffffff [453] hid-sensor-hub 0003:0408:5473.0003: common attributes: 5:1, 2:1, 3:1 ffffffff:ffffffff Add this device to the HID ignore list since the sensor interface is non-functional by design and should not be exposed to userspace.

SeverityMedium
CVSS5.5
Exploit probability—
ProductLinux Kernel
PublishedApr 2, 2025
First seenApr 2, 2025

How to fix

Affected products

ProductAffected versionsFixed in
linux linux_kernelv < 5.4.292, 5.5 ≤ v < 5.10.236, 5.11 ≤ v < 5.15.180, 5.16 ≤ v < 6.1.132, 6.2 ≤ v < 6.6.84, 6.7 ≤ v < 6.12.20, 6.13 ≤ v < 6.13.8, 6.145.4.292, 5.10.236, 5.15.180, 6.1.132, 6.6.84, 6.12.20, 6.13.8

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2025-21992 · Linux Kernel · Dark Radar