CVE-2026-80771 Linux CVE debrief

Who should care

Linux kernel maintainers, developers, and users of devices with nintendo HID drivers should assess exposure and apply patches or updates as available to prevent potential issues. Operators of affected systems, platform administrators, vulnerability management teams, and security teams should review the vulnerability and take necessary actions to mitigate the risk.

Why it matters

CVE-2026-80771 is a Linux kernel vulnerability in the HID: nintendo driver. It was introduced when input_register_device() was called before capabilities were fully set, potentially exposing devices prematurely. The issue has been resolved, but Linux kernel maintainers, developers, and users should verify versions and assess exposure.

• Verify Linux kernel versions for devices using the nintendo HID driver to prevent potential issues
• Assess exposure to concurrent EVIOCSFF problems
• Apply patches or updates as available to ensure capability configuration

Technical summary

The Linux kernel vulnerability (CVE-2026-80771) involves a HID: nintendo issue where input_register_device() was called before capabilities were fully set. This could potentially expose the device to userspace prematurely, allowing concurrent EVIOCSFF to dereference a NULL dev->ff. The issue has been resolved by moving input_register_device() to the end of joycon_input_create(), after all capabilities have been configured.

Defensive priority

Verify Linux kernel versions and assess exposure for devices using the nintendo HID driver.

Recommended defensive actions

• Verify Linux kernel versions for devices using the nintendo HID driver
• Assess exposure and apply patches or updates as available
• Monitor for potential concurrent EVIOCSFF issues
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, but specific version information and exploitation details are not provided. The issue involves a HID: nintendo issue where input_register_device() was called before capabilities were fully set, potentially exposing devices prematurely. Defenders should verify Linux kernel versions for devices using the nintendo HID driver and assess exposure to concurrent EVIOCSFF problems.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.