CVE-2025-38540
Medium
Description
In the Linux kernel, the following vulnerability has been resolved: HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras The Chicony Electronics HP 5MP Cameras (USB ID 04F2:B824 & 04F2:B82C) report a HID sensor interface that is not actually implemented. Attempting to access this non-functional sensor via iio_info causes system hangs as runtime PM tries to wake up an unresponsive sensor. Add these 2 devices to the HID ignore list since the sensor interface is non-functional by design and should not be exposed to userspace.
SeverityMedium
CVSS5.5
Exploit probability—
Product
Linux Kernel
PublishedAug 16, 2025
First seenAug 16, 2025
How to fix
Update
- linux linux_kernel5.4.296, 5.10.240, 5.15.189, 6.1.146, 6.6.99, 6.12.39, 6.15.7 or later
Patches
- git.kernel.org/stable/c/1b297ab6f38ca60a4ca7298b297944ec6043b2f4
- git.kernel.org/stable/c/2b0931eee48208c25bb77486946dea8e96aa6a36
- git.kernel.org/stable/c/35f1a5360ac68d9629abbb3930a0a07901cba296
- git.kernel.org/stable/c/3ce1d87d1f5d80322757aa917182deb7370963b9
- git.kernel.org/stable/c/54bae4c17c11688339eb73a04fd24203bb6e7494
- git.kernel.org/stable/c/7ac00f019698f614a49cce34c198d0568ab0e1c2
- git.kernel.org/stable/c/a2a91abd19c574b598b1c69ad76ad9c7eedaf062
- git.kernel.org/stable/c/c72536350e82b53a1be0f3bfdf1511bba2827102
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 3.8 ≤ v < 5.4.296, 5.5 ≤ v < 5.10.240, 5.11 ≤ v < 5.15.189, 5.16 ≤ v < 6.1.146, 6.2 ≤ v < 6.6.99, 6.7 ≤ v < 6.12.39, 6.13 ≤ v < 6.15.7, 6.16 | 5.4.296, 5.10.240, 5.15.189, 6.1.146, 6.6.99, 6.12.39, 6.15.7 |
| debian debian_linux | 11.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.