CVE-2026-80770

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

HID: nintendo: stop device IO before hid_hw_stop on probe failure

nintendo_hid_probe() calls hid_device_io_start() before joycon_init()

and joycon_leds_create(). If either fails, the error path jumps to

err_close which calls hid_hw_close()/hid_hw_stop() without first calling

hid_device_io_stop().

hid_hw_stop() does not stop device IO, so hid_input_report() may still

run and access driver data that is being torn down, resulting in a

use-after-free.

Add an err_io_stop label that calls hid_device_io_stop() before

hid_hw_close(), and point the two post-io_start error paths at it.

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References