In the Linux kernel, the following vulnerability has been resolved:
HID: nintendo: stop device IO before hidhwstop on probe failure
nintendohidprobe() calls hiddeviceiostart() before joyconinit() and joyconledscreate(). If either fails, the error path jumps to errclose which calls hidhwclose()/hidhwstop() without first calling hiddeviceiostop().
hidhwstop() does not stop device IO, so hidinputreport() may still run and access driver data that is being torn down, resulting in a use-after-free.
Add an erriostop label that calls hiddeviceiostop() before hidhwclose(), and point the two post-iostart error paths at it.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80770.json"
}