PT-2026-85611 · Linux · Linux
CVE-2026-80770
·
Published
2026-09-04
·
Updated
2026-09-04
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
HID: nintendo: stop device IO before hid hw stop on probe failure
nintendo hid probe() calls hid device io start() before joycon init()
and joycon leds create(). If either fails, the error path jumps to
err close which calls hid hw close()/hid hw stop() without first calling
hid device io stop().
hid hw stop() does not stop device IO, so hid input report() may still
run and access driver data that is being torn down, resulting in a
use-after-free.
Add an err io stop label that calls hid device io stop() before
hid hw close(), and point the two post-io start error paths at it.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux