{"id":"CVE-2026-80771","state":"PUBLISHED","title":"HID: nintendo: register input device after capabilities are set","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nHID: nintendo: register input device after capabilities are set\n\ninput_register_device() exposes the device to userspace immediately.\nIn joycon_input_create() it was called before joycon_config_rumble()\nconfigures the FF_RUMBLE capability and the memless force-feedback\ndevice, so a concurrent EVIOCSFF could dereference a NULL dev->ff.\n\nRegistering early also means the initial udev event lacks button and\naxis information, which can make input managers ignore the device.\n\nMove input_register_device() to the end of joycon_input_create(), after\nall capabilities, the IMU input device and the force-feedback callbacks\nhave been configured.","publishedAt":"2026-09-04T15:12:43.246Z","updatedAt":"2026-10-30T12:31:07.549Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"2af16c1f846bd60240745bbd3afa13d5f040c61a","status":"affected","lessThan":"a2a46a705c1fa724aac158fd188273dd7ee8c171","versionType":"git"},{"version":"2af16c1f846bd60240745bbd3afa13d5f040c61a","status":"affected","lessThan":"3288bec1a21d582b504344380139cdc0e88ebe4d","versionType":"git"},{"version":"2af16c1f846bd60240745bbd3afa13d5f040c61a","status":"affected","lessThan":"268679f501386ad46405d42c2bcf89384cb5e256","versionType":"git"},{"version":"2af16c1f846bd60240745bbd3afa13d5f040c61a","status":"affected","lessThan":"a9fc7547f911ada09da33c5e204e5acda38e765a","versionType":"git"},{"version":"2af16c1f846bd60240745bbd3afa13d5f040c61a","status":"affected","lessThan":"27dc4b8eadac73b3c3cc526c8547d8b4ae8528be","versionType":"git"},{"version":"2af16c1f846bd60240745bbd3afa13d5f040c61a","status":"affected","lessThan":"d723bc1fe2e72b9252234e94c11af644ec477bf7","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/hid/hid-nintendo.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"5.16","status":"affected"},{"version":"0","status":"unaffected","lessThan":"5.16","versionType":"semver"},{"version":"6.1.191","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.12.106","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.47","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"7.1.11","status":"unaffected","lessThanOrEqual":"7.1.*","versionType":"semver"},{"version":"7.2.1","status":"unaffected","lessThanOrEqual":"7.2.*","versionType":"semver"},{"version":"7.3","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/hid/hid-nintendo.c"]}],"references":["https://git.kernel.org/stable/c/a2a46a705c1fa724aac158fd188273dd7ee8c171","https://git.kernel.org/stable/c/3288bec1a21d582b504344380139cdc0e88ebe4d","https://git.kernel.org/stable/c/268679f501386ad46405d42c2bcf89384cb5e256","https://git.kernel.org/stable/c/a9fc7547f911ada09da33c5e204e5acda38e765a","https://git.kernel.org/stable/c/27dc4b8eadac73b3c3cc526c8547d8b4ae8528be","https://git.kernel.org/stable/c/d723bc1fe2e72b9252234e94c11af644ec477bf7"],"weaknesses":[],"ingestedAt":"2026-10-30T12:50:04.827Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/80xxx/CVE-2026-80771.json","commit":"1f312381e38164a43607eebab851b151dd16861e","baselineCommit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-80771","state":"PUBLISHED","datePublished":"2026-09-04T15:12:43.246Z","dateUpdated":"2026-10-30T12:31:07.549Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2026-08-26T14:34:25.792Z"},"containers":{"cna":{"title":"HID: nintendo: register input device after capabilities are set","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nHID: nintendo: register input device after capabilities are set\n\ninput_register_device() exposes the device to userspace immediately.\nIn joycon_input_create() it was called before joycon_config_rumble()\nconfigures the FF_RUMBLE capability and the memless force-feedback\ndevice, so a concurrent EVIOCSFF could dereference a NULL dev->ff.\n\nRegistering early also means the initial udev event lacks button and\naxis information, which can make input managers ignore the device.\n\nMove input_register_device() to the end of joycon_input_create(), after\nall capabilities, the IMU input device and the force-feedback callbacks\nhave been configured."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"2af16c1f846bd60240745bbd3afa13d5f040c61a","status":"affected","lessThan":"a2a46a705c1fa724aac158fd188273dd7ee8c171","versionType":"git"},{"version":"2af16c1f846bd60240745bbd3afa13d5f040c61a","status":"affected","lessThan":"3288bec1a21d582b504344380139cdc0e88ebe4d","versionType":"git"},{"version":"2af16c1f846bd60240745bbd3afa13d5f040c61a","status":"affected","lessThan":"268679f501386ad46405d42c2bcf89384cb5e256","versionType":"git"},{"version":"2af16c1f846bd60240745bbd3afa13d5f040c61a","status":"affected","lessThan":"a9fc7547f911ada09da33c5e204e5acda38e765a","versionType":"git"},{"version":"2af16c1f846bd60240745bbd3afa13d5f040c61a","status":"affected","lessThan":"27dc4b8eadac73b3c3cc526c8547d8b4ae8528be","versionType":"git"},{"version":"2af16c1f846bd60240745bbd3afa13d5f040c61a","status":"affected","lessThan":"d723bc1fe2e72b9252234e94c11af644ec477bf7","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/hid/hid-nintendo.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"5.16","status":"affected"},{"version":"0","status":"unaffected","lessThan":"5.16","versionType":"semver"},{"version":"6.1.191","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.12.106","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.47","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"7.1.11","status":"unaffected","lessThanOrEqual":"7.1.*","versionType":"semver"},{"version":"7.2.1","status":"unaffected","lessThanOrEqual":"7.2.*","versionType":"semver"},{"version":"7.3","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/hid/hid-nintendo.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/a2a46a705c1fa724aac158fd188273dd7ee8c171"},{"url":"https://git.kernel.org/stable/c/3288bec1a21d582b504344380139cdc0e88ebe4d"},{"url":"https://git.kernel.org/stable/c/268679f501386ad46405d42c2bcf89384cb5e256"},{"url":"https://git.kernel.org/stable/c/a9fc7547f911ada09da33c5e204e5acda38e765a"},{"url":"https://git.kernel.org/stable/c/27dc4b8eadac73b3c3cc526c8547d8b4ae8528be"},{"url":"https://git.kernel.org/stable/c/d723bc1fe2e72b9252234e94c11af644ec477bf7"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-10-30T12:31:07.549Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.16","versionEndExcluding":"6.1.191"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.16","versionEndExcluding":"6.12.106"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.16","versionEndExcluding":"6.18.47"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.16","versionEndExcluding":"7.1.11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.16","versionEndExcluding":"7.2.1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.16","versionEndExcluding":"7.3"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}