CVE-2025-38540

HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras

published August 16, 2025

CVSS
—
EPSS
0%
Percentile
6.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras

The Chicony Electronics HP 5MP Cameras (USB ID 04F2:B824 & 04F2:B82C)

report a HID sensor interface that is not actually implemented.

Attempting to access this non-functional sensor via iio_info causes

system hangs as runtime PM tries to wake up an unresponsive sensor.

Add these 2 devices to the HID ignore list since the sensor interface is

non-functional by design and should not be exposed to userspace.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00170 · 6.1th percentile
Published
2025-08-16T11:22Z
EPSS history
Timeline
  • 16 AUG 11:22Z
    HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras
    cvelistv5