-

CVE-2026-80770

Medienbericht

HID: nintendo: stop device IO before hid_hw_stop on probe failure

In the Linux kernel, the following vulnerability has been resolved:

HID: nintendo: stop device IO before hid_hw_stop on probe failure

nintendo_hid_probe() calls hid_device_io_start() before joycon_init()
and joycon_leds_create().  If either fails, the error path jumps to
err_close which calls hid_hw_close()/hid_hw_stop() without first calling
hid_device_io_stop().

hid_hw_stop() does not stop device IO, so hid_input_report() may still
run and access driver data that is being torn down, resulting in a
use-after-free.

Add an err_io_stop label that calls hid_device_io_stop() before
hid_hw_close(), and point the two post-io_start error paths at it.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 2af16c1f846bd60240745bbd3afa13d5f040c61a
Version < c2f3d51c7f5222f5b51e0c90f02258d82e1b44dd
Status affected
Version 2af16c1f846bd60240745bbd3afa13d5f040c61a
Version < c023443f0e6cfd257846b6515c93c1ea08026593
Status affected
Version 2af16c1f846bd60240745bbd3afa13d5f040c61a
Version < 03a84f9f88b42cd49752ec0259922b67e4b88598
Status affected
Version 2af16c1f846bd60240745bbd3afa13d5f040c61a
Version < 5efcd7bbfaaec67d137c99aa0940fa34375db27f
Status affected
Version 2af16c1f846bd60240745bbd3afa13d5f040c61a
Version < 13a3edf96568a0b7aacadea07c2adec53ac8f630
Status affected
Version 2af16c1f846bd60240745bbd3afa13d5f040c61a
Version < 2e0d98dc8a6dea5fc2b72bf66e0dcbd5488644b4
Status affected
Version 2af16c1f846bd60240745bbd3afa13d5f040c61a
Version < 1f74d3bff6fe04a64e02ab3661d2e0d554565aa6
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.16
Status affected
Version 0
Version < 5.16
Status unaffected
Version <= 6.1.*
Version 6.1.187
Status unaffected
Version <= 6.6.*
Version 6.6.156
Status unaffected
Version <= 6.12.*
Version 6.12.106
Status unaffected
Version <= 6.18.*
Version 6.18.47
Status unaffected
Version <= 7.1.*
Version 7.1.11
Status unaffected
Version <= 7.2.*
Version 7.2.1
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.068
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
08.09.2026 20:38
https://git.kernel.org/stable/c/c2f3d51c7f5222f5b51e0c90f02258d82e1b44dd
https://git.kernel.org/stable/c/c023443f0e6cfd257846b6515c93c1ea08026593
https://git.kernel.org/stable/c/03a84f9f88b42cd49752ec0259922b67e4b88598
https://git.kernel.org/stable/c/5efcd7bbfaaec67d137c99aa0940fa34375db27f
https://git.kernel.org/stable/c/13a3edf96568a0b7aacadea07c2adec53ac8f630
https://git.kernel.org/stable/c/2e0d98dc8a6dea5fc2b72bf66e0dcbd5488644b4
https://git.kernel.org/stable/c/1f74d3bff6fe04a64e02ab3661d2e0d554565aa6