5.5

CVE-2025-21992: linux

CVSS: 5.5v3.1MediumModified
AliasesUBUNTU-CVE-2025-21992DEBIAN-CVE-2025-21992
Published 02-04-2025Last modified 11-05-2026
Open JSON

Vulnerability summary

CVE-2025-21992 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.20% chance of exploitation in the next 30 days, higher than 9.6% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.20%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 54 · Related 49
DLA-4178-1DLA-4193-1DSA-5900-1MGASA-2025-0142MGASA-2025-0146SUSE-SU-2025:01614-1

Timeline

  1. 02-04-2025
    PublishedVulnerability first disclosed.
  2. 11-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: HID: ignore non-functional sensor in HP 5MP Camera The HP 5MP Camera (USB ID 0408:5473) reports a HID sensor interface that is not actually implemented. Attempting to access this non-functional sensor via iio_info causes system hangs as runtime PM tries to wake up an unresponsive sensor. [453] hid-sensor-hub 0003:0408:5473.0003: Report latency attributes: ffffffff:ffffffff [453] hid-sensor-hub 0003:0408:5473.0003: common attributes: 5:1, 2:1, 3:1 ffffffff:ffffffff Add this device to the HID ignore list since the sensor interface is non-functional by design and should not be exposed to userspace.

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.20%

Chance of exploitation in the next 30 days

Percentile

10%

Versus all other CVEs

30-day change

0.00 pp

From 0.20% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.20%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu138 products
  • linuxAll versions (No fix recorded) | < 5.4.0-218.238 | < 5.15.0-142.152 | < 6.8.0-84.84
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.4.0-1147.157 | < 5.15.0-1086.93 | < 6.8.0-1039.41
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ e04955db6a7c3fc4a1e6978649b61a6f5f8028e3, < 7a7ada33879a631b05b536e66d1c5b1219d3bade | ≥ e04955db6a7c3fc4a1e6978649b61a6f5f8028e3, < 6ca3d4d87af406a390a34ea924ab65c517e6e132 | ≥ e04955db6a7c3fc4a1e6978649b61a6f5f8028e3, < 920ea73215dbf948b661b88a79cb47b7f96adfbd | ≥ e04955db6a7c3fc4a1e6978649b61a6f5f8028e3, < 363236d709e75610b628c2a4337ccbe42e454b6d | 6.3
  • linux_kernel< 5.4.292 | ≥ 5.5, < 5.10.236 | ≥ 5.11, < 5.15.180 | ≥ 5.16, < 6.1.132 | ≥ 6.2, < 6.6.84 | ≥ 6.7, < 6.12.20 | ≥ 6.13, < 6.13.8 | 6.14:rc1 | 6.14:rc2
Debian1 product
  • linux< 6.1.133-1 | < 6.12.20-1

3 vendors · 141 products

References

50 links
Show all 50 references