CVE-2025-21992

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-21992
In the Linux kernel, the following vulnerability has been resolved: HID: ignore non-functional sensor in HP 5MP Camera The HP 5MP Camera (USB ID 0408:5473) reports a HID sensor interface that is not actually implemented. Attempting to access this non-functional sensor via iio_info causes system hangs as runtime PM tries to wake up an unresponsive sensor. [453] hid-sensor-hub 0003:0408:5473.0003: Report latency attributes: ffffffff:ffffffff [453] hid-sensor-hub 0003:0408:5473.0003: common attributes: 5:1, 2:1, 3:1 ffffffff:ffffffff Add this device to the HID ignore list since the sensor interface is non-functional by design and should not be exposed to userspace.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/007a849126ef7907761af6a1379400558a72e703 Patch
https://git.kernel.org/stable/c/363236d709e75610b628c2a4337ccbe42e454b6d Patch
https://git.kernel.org/stable/c/6ca3d4d87af406a390a34ea924ab65c517e6e132 Patch
https://git.kernel.org/stable/c/7a7ada33879a631b05b536e66d1c5b1219d3bade Patch
https://git.kernel.org/stable/c/920ea73215dbf948b661b88a79cb47b7f96adfbd Patch
https://git.kernel.org/stable/c/9acdb0059fb6b82158e15adae91e629cb5974564 Patch
https://git.kernel.org/stable/c/9af297aea8f76a0ad21f2de5f2cd6401a748b9c3 Patch
https://git.kernel.org/stable/c/b6c6c2d8ab4932e5d6d439f514276cb3d257b8fe Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*
History

28 Oct 2025, 18:02

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE NVD-CWE-noinfo
References () https://git.kernel.org/stable/c/007a849126ef7907761af6a1379400558a72e703 - () https://git.kernel.org/stable/c/007a849126ef7907761af6a1379400558a72e703 - Patch
References () https://git.kernel.org/stable/c/363236d709e75610b628c2a4337ccbe42e454b6d - () https://git.kernel.org/stable/c/363236d709e75610b628c2a4337ccbe42e454b6d - Patch
References () https://git.kernel.org/stable/c/6ca3d4d87af406a390a34ea924ab65c517e6e132 - () https://git.kernel.org/stable/c/6ca3d4d87af406a390a34ea924ab65c517e6e132 - Patch
References () https://git.kernel.org/stable/c/7a7ada33879a631b05b536e66d1c5b1219d3bade - () https://git.kernel.org/stable/c/7a7ada33879a631b05b536e66d1c5b1219d3bade - Patch
References () https://git.kernel.org/stable/c/920ea73215dbf948b661b88a79cb47b7f96adfbd - () https://git.kernel.org/stable/c/920ea73215dbf948b661b88a79cb47b7f96adfbd - Patch
References () https://git.kernel.org/stable/c/9acdb0059fb6b82158e15adae91e629cb5974564 - () https://git.kernel.org/stable/c/9acdb0059fb6b82158e15adae91e629cb5974564 - Patch
References () https://git.kernel.org/stable/c/9af297aea8f76a0ad21f2de5f2cd6401a748b9c3 - () https://git.kernel.org/stable/c/9af297aea8f76a0ad21f2de5f2cd6401a748b9c3 - Patch
References () https://git.kernel.org/stable/c/b6c6c2d8ab4932e5d6d439f514276cb3d257b8fe - () https://git.kernel.org/stable/c/b6c6c2d8ab4932e5d6d439f514276cb3d257b8fe - Patch

10 Apr 2025, 13:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/007a849126ef7907761af6a1379400558a72e703 -
  • () https://git.kernel.org/stable/c/9af297aea8f76a0ad21f2de5f2cd6401a748b9c3 -
  • () https://git.kernel.org/stable/c/b6c6c2d8ab4932e5d6d439f514276cb3d257b8fe -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: HID: ignorar sensor no funcional en cámara HP de 5 MP La cámara HP de 5 MP (ID USB 0408:5473) informa sobre una interfaz de sensor HID que no está implementada. Intentar acceder a este sensor no funcional a través de iio_info provoca que el sistema se cuelgue mientras el PM en tiempo de ejecución intenta despertar un sensor que no responde. [453] hid-sensor-hub 0003:0408:5473.0003: Informar atributos de latencia: ffffffff:ffffffff [453] hid-sensor-hub 0003:0408:5473.0003: atributos comunes: 5:1, 2:1, 3:1 ffffffff:ffffffff Agregue este dispositivo a la lista de ignorados de HID ya que la interfaz del sensor no es funcional por diseño y no debe exponerse al espacio de usuario.

02 Apr 2025, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-04-02 13:15

Updated : 2025-10-28 18:02

NVD link : CVE-2025-21992

Mitre link : CVE-2025-21992

CVE.ORG link : CVE-2025-21992

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo