CVE-2026-80770

Source
https://cve.org/CVERecord?id=CVE-2026-80770
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80770.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-80770
Downstream
Published
2026-09-04T15:12:42.327Z
Modified
2026-09-06T03:46:43.861682606Z
Summary
HID: nintendo: stop device IO before hid_hw_stop on probe failure
Details

In the Linux kernel, the following vulnerability has been resolved:

HID: nintendo: stop device IO before hidhwstop on probe failure

nintendohidprobe() calls hiddeviceiostart() before joyconinit() and joyconledscreate(). If either fails, the error path jumps to errclose which calls hidhwclose()/hidhwstop() without first calling hiddeviceiostop().

hidhwstop() does not stop device IO, so hidinputreport() may still run and access driver data that is being torn down, resulting in a use-after-free.

Add an erriostop label that calls hiddeviceiostop() before hidhwclose(), and point the two post-iostart error paths at it.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80770.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
2af16c1f846bd60240745bbd3afa13d5f040c61a
Fixed
c2f3d51c7f5222f5b51e0c90f02258d82e1b44dd
Fixed
c023443f0e6cfd257846b6515c93c1ea08026593
Fixed
03a84f9f88b42cd49752ec0259922b67e4b88598
Fixed
5efcd7bbfaaec67d137c99aa0940fa34375db27f
Fixed
13a3edf96568a0b7aacadea07c2adec53ac8f630
Fixed
2e0d98dc8a6dea5fc2b72bf66e0dcbd5488644b4
Fixed
1f74d3bff6fe04a64e02ab3661d2e0d554565aa6

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80770.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.187
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.156
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.106
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.47
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.11
Type
ECOSYSTEM
Events
Introduced
7.2.0
Fixed
7.2.1

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80770.json"