CVE-2026-80772 Linux CVE debrief

Who should care

Linux kernel developers and maintainers, Linux distribution maintainers, and users of Linux-based systems should be aware of this vulnerability and take steps to mitigate it. Linux kernel developers and maintainers should review and apply patches to address this vulnerability. Linux distribution maintainers should ensure that their distributions are updated with the latest kernel patches. Users of Linux-based systems should ensure their kernel versions are

Why it matters

The Linux kernel vulnerability CVE-2026-80772 allows for an out-of-bounds read in the joycon_ctlr_read_handler() function, potentially leaking driver-internal memory to userspace. This vulnerability requires verification of affected versions, exploitation, and remediation from official sources.

• Potential information disclosure due to out-of-bounds read
• Possible system crashes or instability due to invalid memory access
• Increased risk of privilege escalation or unauthorized access

Technical summary

The joycon_ctlr_read_handler() function in the Linux kernel does not properly validate the length of incoming HID input reports, allowing for an out-of-bounds read. This can potentially leak driver-internal memory to userspace. The vulnerability is caused by a 12-byte length check that is insufficient to prevent an out-of-bounds read. The receive buffers are sized to the maximum report length, preventing a slab OOB, but the decoded bytes still reach userspace. Affected Linux kernel versions should be identified, and patches should be applied to prevent exploitation.

Defensive priority

Medium

Recommended defensive actions

• Review and apply the provided kernel patches to fix the vulnerability
• Verify the Linux kernel version and ensure it is up-to-date
• Monitor system logs for potential exploitation attempts
• Perform a thorough review of system configurations and ensure that compensating controls are in place
• Conduct regular vulnerability assessments and penetration testing to identify potential weaknesses
• Implement additional monitoring and detection mechanisms to identify potential exploitation attempts
• Track exceptions and retest remediated assets to ensure the vulnerability is fully resolved

Evidence notes

The vulnerability is caused by a 12-byte length check in the joycon_ctlr_read_handler() function, which is insufficient to prevent an out-of-bounds read. The receive buffers are sized to the maximum report length, preventing a slab OOB, but the decoded bytes still reach userspace.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.