CVE-2026-80771

HID: nintendo: register input device after capabilities are set

State: Published
Severity: Not scored
Published: Sep 4, 2026
Updated: Oct 30, 2026
Reserved: Aug 26, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

HID: nintendo: register input device after capabilities are set

input_register_device() exposes the device to userspace immediately. In joycon_input_create() it was called before joycon_config_rumble() configures the FF_RUMBLE capability and the memless force-feedback device, so a concurrent EVIOCSFF could dereference a NULL dev->ff.

Registering early also means the initial udev event lacks button and axis information, which can make input managers ignore the device.

Move input_register_device() to the end of joycon_input_create(), after all capabilities, the IMU input device and the force-feedback callbacks have been configured.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	2af16c1f846bd60240745bbd3afa13d5f040c61a to before a2a46a705c1fa724aac158fd188273dd7ee8c171Affected 2af16c1f846bd60240745bbd3afa13d5f040c61a to before 3288bec1a21d582b504344380139cdc0e88ebe4dAffected 2af16c1f846bd60240745bbd3afa13d5f040c61a to before 268679f501386ad46405d42c2bcf89384cb5e256Affected 2af16c1f846bd60240745bbd3afa13d5f040c61a to before a9fc7547f911ada09da33c5e204e5acda38e765aAffected 2af16c1f846bd60240745bbd3afa13d5f040c61a to before 27dc4b8eadac73b3c3cc526c8547d8b4ae8528beAffected 2af16c1f846bd60240745bbd3afa13d5f040c61a to before d723bc1fe2e72b9252234e94c11af644ec477bf7Affected
LinuxLinux	5.16Affected before 5.16Not affected 6.1.191 through 6.1.Not affected 6.12.106 through 6.12.Not affected 6.18.47 through 6.18.Not affected 7.1.11 through 7.1.Not affected 7.2.1 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

2af16c1f846bd60240745bbd3afa13d5f040c61a to before a2a46a705c1fa724aac158fd188273dd7ee8c171Affected
2af16c1f846bd60240745bbd3afa13d5f040c61a to before 3288bec1a21d582b504344380139cdc0e88ebe4dAffected
2af16c1f846bd60240745bbd3afa13d5f040c61a to before 268679f501386ad46405d42c2bcf89384cb5e256Affected
2af16c1f846bd60240745bbd3afa13d5f040c61a to before a9fc7547f911ada09da33c5e204e5acda38e765aAffected
2af16c1f846bd60240745bbd3afa13d5f040c61a to before 27dc4b8eadac73b3c3cc526c8547d8b4ae8528beAffected
2af16c1f846bd60240745bbd3afa13d5f040c61a to before d723bc1fe2e72b9252234e94c11af644ec477bf7Affected

LinuxLinux

5.16Affected
before 5.16Not affected
6.1.191 through 6.1.*Not affected
6.12.106 through 6.12.*Not affected
6.18.47 through 6.18.*Not affected
7.1.11 through 7.1.*Not affected
7.2.1 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.