CVE-2026-80771

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In the joycon input create() function, the input register device() function was called before joycon config rumble() could configure the FF RUMBLE capability and the memless force-feedback device. Because input register device() exposes the device to userspace immediately, a concurrent EVIOCSFF could dereference a NULL dev->ff. Additionally, early registration causes the initial udev event to lack button and axis information, which may lead input managers to ignore the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.