CVE-2025-38540
BaseFortify
Publication date: 2025-08-16
Last updated on: 2025-11-03
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | 5.10.244 |
| linux | linux_kernel | 6.1.153 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability involves two specific Chicony Electronics HP 5MP Cameras (USB IDs 04F2:B824 and 04F2:B82C) that report a HID sensor interface which is not actually implemented. When the system tries to access this non-functional sensor via the iio_info tool, it causes the system to hang because the runtime power management attempts to wake up a sensor that does not respond. The fix was to add these devices to the HID ignore list to prevent the non-functional sensor interface from being exposed to userspace.
How can this vulnerability impact me? :
The vulnerability can cause system hangs or freezes when attempting to access the non-functional sensor interface on the affected cameras. This can lead to reduced system stability and potential disruption of normal operations when these devices are connected and accessed.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
You can detect this vulnerability by identifying if your system has connected Chicony Electronics HP 5MP Cameras with USB IDs 04F2:B824 or 04F2:B82C. Use the command 'lsusb' to list USB devices and check for these IDs. Additionally, monitoring for system hangs or issues when running 'iio_info' on the sensor interface may indicate the presence of this vulnerability.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, update your Linux kernel to a version that includes the fix which adds these two Chicony Electronics HP 5MP Cameras to the HID ignore list. This prevents the system from attempting to access the non-functional sensor interface and avoids system hangs.