CVE-2025-38540

MediumCVSS 5.5/10Last modified Nov 5, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras

The Chicony Electronics HP 5MP Cameras (USB ID 04F2:B824 & 04F2:B82C) report a HID sensor interface that is not actually implemented. Attempting to access this non-functional sensor via iio_info causes system hangs as runtime PM tries to wake up an unresponsive sensor.

Add these 2 devices to the HID ignore list since the sensor interface is non-functional by design and should not be exposed to userspace.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 83499b52c61f50292f0aae36499de8a8fc3e37c3, < 35f1a5360ac68d9629abbb3930a0a07901cba296; >= 83499b52c61f50292f0aae36499de8a8fc3e37c3, < 7ac00f019698f614a49cce34c198d0568ab0e1c2; >= 83499b52c61f50292f0aae36499de8a8fc3e37c3, < 1b297ab6f38ca60a4ca7298b297944ec6043b2f4; >= 83499b52c61f50292f0aae36499de8a8fc3e37c3, < 2b0931eee48208c25bb77486946dea8e96aa6a36; >= 83499b52c61f50292f0aae36499de8a8fc3e37c3, < 3ce1d87d1f5d80322757aa917182deb7370963b9; >= 83499b52c61f50292f0aae36499de8a8fc3e37c3, < c72536350e82b53a1be0f3bfdf1511bba2827102; >= 83499b52c61f50292f0aae36499de8a8fc3e37c3, < a2a91abd19c574b598b1c69ad76ad9c7eedaf062; >= 83499b52c61f50292f0aae36499de8a8fc3e37c3, < 54bae4c17c11688339eb73a04fd24203bb6e7494
LinuxLinux3.8

References

Timeline

Published
Aug 16, 2025
Last modified
Nov 5, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-385415.5In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: Fix null-ptr-deref in mt7925_thermal_init() devm_kCVE-2025-385425.5In the Linux kernel, the following vulnerability has been resolved: net: appletalk: Fix device refcount leak in atrtr_create() When updatiCVE-2025-385435.5In the Linux kernel, the following vulnerability has been resolved: drm/tegra: nvdec: Fix dma_alloc_coherent error check Check for NULL reCVE-2025-385445.5In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix bug due to prealloc collision When userspace is using AF_RXCVE-2025-385455.5In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw-nuss: Fix skb size by accounting for skb_sCVE-2025-385465.5In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix memory leak of struct clip_vcc. ioctl(ATMARP_MKIP) alloCVE-2025-385475.5In the Linux kernel, the following vulnerability has been resolved: iio: adc: axp20x_adc: Add missing sentinel to AXP717 ADC channel maps CVE-2025-385487.8In the Linux kernel, the following vulnerability has been resolved: hwmon: (corsair-cpro) Validate the size of the received input buffer ACVE-2025-385495.5In the Linux kernel, the following vulnerability has been resolved: efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error pathsCVE-2025-38554.3A vulnerability was found in CodeCanyon RISE Ultimate Project Manager 3.8.2 and classified as problematic. Affected by this issue is some unCVE-2025-385507.8In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Delay put pmc->idev in mld_del_delrec() pmc->idev is stilCVE-2025-385515.5In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix recursived rtnl_lock() during probe() The deadlock app
CVE-2025-38540: Medium severity, CVSS 5.5 | Vulnix