CVE-2026-80771

A flaw was found in the Linux kernel's Nintendo Joy-Con driver. A local attacker could potentially trigger a null pointer dereference by sending a concurrent force-feedback (FF_RUMBLE) command while the device is being registered. This could lead to a system crash, resulting in a Denial of Service (DoS).

Moderate severity is assigned to this flaw because exploitation requires local access and precise timing during device registration, resulting in a system crash without compromising confidentiality or integrity. Triggering this race condition requires connecting specialized Nintendo hardware or emulating it on the local host. Typical Red Hat Enterprise Linux installations are not exposed by default, and enterprise environments rarely utilize consumer gaming peripherals.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.