CVE-2026-80771 PUBLISHED

HID: nintendo: register input device after capabilities are set

Assigner: Linux
Reserved: 26.08.2026 Published: 04.09.2026 Updated: 04.09.2026

In the Linux kernel, the following vulnerability has been resolved:

HID: nintendo: register input device after capabilities are set

input_register_device() exposes the device to userspace immediately. In joycon_input_create() it was called before joycon_config_rumble() configures the FF_RUMBLE capability and the memless force-feedback device, so a concurrent EVIOCSFF could dereference a NULL dev->ff.

Registering early also means the initial udev event lacks button and axis information, which can make input managers ignore the device.

Move input_register_device() to the end of joycon_input_create(), after all capabilities, the IMU input device and the force-feedback callbacks have been configured.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 2af16c1f846bd60240745bbd3afa13d5f040c61a to 3288bec1a21d582b504344380139cdc0e88ebe4d (excl.)
  • affected from 2af16c1f846bd60240745bbd3afa13d5f040c61a to 268679f501386ad46405d42c2bcf89384cb5e256 (excl.)
  • affected from 2af16c1f846bd60240745bbd3afa13d5f040c61a to a9fc7547f911ada09da33c5e204e5acda38e765a (excl.)
  • affected from 2af16c1f846bd60240745bbd3afa13d5f040c61a to 27dc4b8eadac73b3c3cc526c8547d8b4ae8528be (excl.)
  • affected from 2af16c1f846bd60240745bbd3afa13d5f040c61a to d723bc1fe2e72b9252234e94c11af644ec477bf7 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 5.16 is affected
  • unaffected from 0 to 5.16 (excl.)
  • unaffected from 6.12.106 to 6.12.* (incl.)
  • unaffected from 6.18.47 to 6.18.* (incl.)
  • unaffected from 7.1.11 to 7.1.* (incl.)
  • unaffected from 7.2.1 to 7.2.* (incl.)
  • unaffected from 7.3-rc1 to * (incl.)

References