---
id: CVE-2025-38540
title: 'HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras

  The Chicony Electronics HP 5MP Cameras (USB ID 04F2:B824 & 04F2:B82C)
  report a HID sensor interface tha…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 83499b52c61f50292f0aae36499de8a8fc3e37c3 <
    35f1a5360ac68d9629abbb3930a0a07901cba296
  - >-
    Linux >= 83499b52c61f50292f0aae36499de8a8fc3e37c3 <
    7ac00f019698f614a49cce34c198d0568ab0e1c2
  - >-
    Linux >= 83499b52c61f50292f0aae36499de8a8fc3e37c3 <
    1b297ab6f38ca60a4ca7298b297944ec6043b2f4
  - >-
    Linux >= 83499b52c61f50292f0aae36499de8a8fc3e37c3 <
    2b0931eee48208c25bb77486946dea8e96aa6a36
  - >-
    Linux >= 83499b52c61f50292f0aae36499de8a8fc3e37c3 <
    3ce1d87d1f5d80322757aa917182deb7370963b9
  - >-
    Linux >= 83499b52c61f50292f0aae36499de8a8fc3e37c3 <
    c72536350e82b53a1be0f3bfdf1511bba2827102
  - >-
    Linux >= 83499b52c61f50292f0aae36499de8a8fc3e37c3 <
    a2a91abd19c574b598b1c69ad76ad9c7eedaf062
  - >-
    Linux >= 83499b52c61f50292f0aae36499de8a8fc3e37c3 <
    54bae4c17c11688339eb73a04fd24203bb6e7494
  - Linux 3.8
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T21:03:29.416652Z'
published: '2025-08-16'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:12:46.164Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-38540'
references:
  - url: 'https://git.kernel.org/stable/c/35f1a5360ac68d9629abbb3930a0a07901cba296'
  - url: 'https://git.kernel.org/stable/c/7ac00f019698f614a49cce34c198d0568ab0e1c2'
  - url: 'https://git.kernel.org/stable/c/1b297ab6f38ca60a4ca7298b297944ec6043b2f4'
  - url: 'https://git.kernel.org/stable/c/2b0931eee48208c25bb77486946dea8e96aa6a36'
  - url: 'https://git.kernel.org/stable/c/3ce1d87d1f5d80322757aa917182deb7370963b9'
  - url: 'https://git.kernel.org/stable/c/c72536350e82b53a1be0f3bfdf1511bba2827102'
  - url: 'https://git.kernel.org/stable/c/a2a91abd19c574b598b1c69ad76ad9c7eedaf062'
  - url: 'https://git.kernel.org/stable/c/54bae4c17c11688339eb73a04fd24203bb6e7494'
tags:
  - cve.org
epss: 0.00181
epssPercentile: 0.07677
ingestedAt: '2026-11-05T22:38:31.988Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras

The Chicony Electronics HP 5MP Cameras (USB ID 04F2:B824 & 04F2:B82C)
report a HID sensor interface that is not actually implemented.
Attempting to access this non-functional sensor via iio_info causes
system hangs as runtime PM tries to wake up an unresponsive sensor.

Add these 2 devices to the HID ignore list since the sensor interface is
non-functional by design and should not be exposed to userspace.

## Affected

- `Linux >= 83499b52c61f50292f0aae36499de8a8fc3e37c3 < 35f1a5360ac68d9629abbb3930a0a07901cba296`
- `Linux >= 83499b52c61f50292f0aae36499de8a8fc3e37c3 < 7ac00f019698f614a49cce34c198d0568ab0e1c2`
- `Linux >= 83499b52c61f50292f0aae36499de8a8fc3e37c3 < 1b297ab6f38ca60a4ca7298b297944ec6043b2f4`
- `Linux >= 83499b52c61f50292f0aae36499de8a8fc3e37c3 < 2b0931eee48208c25bb77486946dea8e96aa6a36`
- `Linux >= 83499b52c61f50292f0aae36499de8a8fc3e37c3 < 3ce1d87d1f5d80322757aa917182deb7370963b9`
- `Linux >= 83499b52c61f50292f0aae36499de8a8fc3e37c3 < c72536350e82b53a1be0f3bfdf1511bba2827102`
- `Linux >= 83499b52c61f50292f0aae36499de8a8fc3e37c3 < a2a91abd19c574b598b1c69ad76ad9c7eedaf062`
- `Linux >= 83499b52c61f50292f0aae36499de8a8fc3e37c3 < 54bae4c17c11688339eb73a04fd24203bb6e7494`
- `Linux 3.8`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.