CVE-2026-80771: Linux kernel · HID: nintendo: register input device after capabilities are set
Affects Linux kernelSource CVE Database V5
Not known to be exploited · fixed in d723bc1fe2e72b9252234e94c11af644ec477bf7 : update Linux kernel when convenient.
Data as of 30 Oct 2026, 13:18 UTC
Rated Medium by Threat Radar's AI analysis · CVSS not yet scored by NVD
Thin evidence
One scorer or none- Patch
- Available – fixed in d723bc1fe2e72b9252234e94c11af644ec477bf7, a9fc7547f911ada09da33c5e204e5acda38e765a, a2a46a705c1fa724aac158fd188273dd7ee8c171 +3
Exploitation evidence
Disclosed: evidence found.
CVE published 4 Sep 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 30 Oct 2026.
What to do
Upgrade to a fixed release listed under Affected software.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
AI-suggested
A fix is available and has been applied in the Linux kernel source. Users should update to a kernel version that includes the fix identified by the commits d723bc1fe2e72b9252234e94c11af644ec477bf7 and others listed. No additional mitigation is required beyond applying the official patch.
Description
A vulnerability in the Linux kernel's Nintendo HID driver was fixed by changing when the input device is registered. Previously, the device was registered before all capabilities, including force-feedback, were set, which could cause a NULL pointer dereference and incomplete device information exposure to userspace.
References
- git.kernel.org/stable/c/a2a46a705c1fa724aac158fd188273dd7ee8c171 (opens in a new tab)
- git.kernel.org/stable/c/3288bec1a21d582b504344380139cdc0e88ebe4d (opens in a new tab)
- git.kernel.org/stable/c/268679f501386ad46405d42c2bcf89384cb5e256 (opens in a new tab)
- git.kernel.org/stable/c/a9fc7547f911ada09da33c5e204e5acda38e765a (opens in a new tab)
- git.kernel.org/stable/c/27dc4b8eadac73b3c3cc526c8547d8b4ae8528be (opens in a new tab)
- git.kernel.org/stable/c/d723bc1fe2e72b9252234e94c11af644ec477bf7 (opens in a new tab)