NetSight
medium5.5

CVE-2025-38540

In the Linux kernel, the following vulnerability has been resolved: HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras The Chicony Electronics HP …

Impact

In the Linux kernel, the following vulnerability has been resolved: HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras The Chicony Electronics HP 5MP Cameras (USB ID 04F2:B824 & 04F2:B82C) report a HID sensor interface that is not actually implemented. Attempting to access this non-functional sensor via iio_info causes system hangs as runtime PM tries to wake up an unresponsive sensor. Add these 2 devices to the HID ignore list since the sensor interface is non-functional by design and should not be exposed to userspace.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.8 before 5.4.296
from 5.5 before 5.10.240
from 5.11 before 5.15.189
from 5.16 before 6.1.146
from 6.2 before 6.6.99
from 6.7 before 6.12.39
DebianDebian Linux
Version 11.0

References