HID Sensor Interface Vulnerability in Chicony Electronics HP 5MP Cameras

CVE-2025-38540

What is CVE-2025-38540?

The Chicony Electronics HP 5MP Cameras have a vulnerability that affects their HID sensor interface, which is not correctly implemented. This results in an unintended consequence where attempts to access this non-functional sensor using iio_info can lead to system hangs. Consequently, runtime power management attempts to interact with an unresponsive sensor. To mitigate this issue, these specific models should be added to the HID ignore list, preventing unnecessary exposure to the userspace.

References