CVE-2026-80770: linux

CVSS: UnknownReceived
AliasesUBUNTU-CVE-2026-80770DEBIAN-CVE-2026-80770
Published 04-09-2026Last modified 19-10-2026
Open JSON

Vulnerability summary

CVE-2026-80770 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.21% chance of exploitation in the next 30 days, higher than 11.2% of scored vulnerabilities.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
0.21%
0%100%
Low · +0.04 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 2 · Related 1
MGASA-2026-0506OPENSUSE-SU-2026:11773-1

Timeline

  1. 04-09-2026
    PublishedVulnerability first disclosed.
  2. 19-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: stop device IO before hid_hw_stop on probe failure nintendo_hid_probe() calls hid_device_io_start() before joycon_init() and joycon_leds_create(). If either fails, the error path jumps to err_close which calls hid_hw_close()/hid_hw_stop() without first calling hid_device_io_stop(). hid_hw_stop() does not stop device IO, so hid_input_report() may still run and access driver data that is being torn down, resulting in a use-after-free. Add an err_io_stop label that calls hid_device_io_stop() before hid_hw_close(), and point the two post-io_start error paths at it.

CVSS metrics

Risk metrics not yet published.

EPSS trend

Probability

0.21%

Chance of exploitation in the next 30 days

Percentile

11%

Versus all other CVEs

30-day change

+0.04 pp

From 0.17% on 21-09-2026

21-09-202621-10-2026
EPSS score
0.21%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu142 products
  • linuxAll versions (No fix recorded)
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded)
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
  • linux< 6.1.187-1 | < 6.12.107-1 | < 7.1.12-1
  • linux-6.12< 6.12.107-1~deb12u1
Linux1 product
  • linux≥ 2af16c1f846bd60240745bbd3afa13d5f040c61a, < c2f3d51c7f5222f5b51e0c90f02258d82e1b44dd | ≥ 2af16c1f846bd60240745bbd3afa13d5f040c61a, < c023443f0e6cfd257846b6515c93c1ea08026593 | ≥ 2af16c1f846bd60240745bbd3afa13d5f040c61a, < 03a84f9f88b42cd49752ec0259922b67e4b88598 | ≥ 2af16c1f846bd60240745bbd3afa13d5f040c61a, < 5efcd7bbfaaec67d137c99aa0940fa34375db27f | ≥ 2af16c1f846bd60240745bbd3afa13d5f040c61a, < 13a3edf96568a0b7aacadea07c2adec53ac8f630 | ≥ 2af16c1f846bd60240745bbd3afa13d5f040c61a, < 2e0d98dc8a6dea5fc2b72bf66e0dcbd5488644b4 | ≥ 2af16c1f846bd60240745bbd3afa13d5f040c61a, < 1f74d3bff6fe04a64e02ab3661d2e0d554565aa6 | 5.16

3 vendors · 145 products

References

11 links
Show all 11 references