CVE-2026-80771

In the Linux kernel, the following vulnerability has been resolved:

HID: nintendo: register input device after capabilities are set

input register device() exposes the device to userspace immediately. In joycon input create() it was called before joycon config rumble() configures the FF RUMBLE capability and the memless force-feedback device, so a concurrent EVIOCSFF could dereference a NULL dev->ff.

Registering early also means the initial udev event lacks button and axis information, which can make input managers ignore the device.

Move input register device() to the end of joycon input create(), after all capabilities, the IMU input device and the force-feedback callbacks have been configured.