270 matches found
CVE-2026-80772 HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler()
In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: fix out-of-bounds read in joyconctlrreadhandler joyconctlrreadhandler casts an incoming HID input report to struct joyconinputreport and parses it, guarding the cast only with a 12-byte length check: if size = 12 /...
CVE-2026-80772
CVE-2026-80772 is an out-of-bounds read in the Linux kernel 's HID Nintendo driver, specifically in joycon_ctlr_read_handler(). The function guards a cast of incoming HID input reports to a 49-byte struct joycon_input_report with only a 12-byte length check. A 12-byte report with data[0] == JC_IN...
CVE-2026-80772
In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: fix out-of-bounds read in joyconctlrreadhandler joyconctlrreadhandler casts an incoming HID input report to struct joyconinputreport and parses it, guarding the cast only with a 12-byte length check: if size = 12 /...
EUVD-2026-71414
In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: register input device after capabilities are set inputregisterdevice exposes the device to userspace immediately. In joyconinputcreate it was called before joyconconfigrumble configures the FFRUMBLE capability and...
CVE-2026-80771
CVE-2026-80771 affects the Linux kernel 's HID Nintendo (Joy-Con) driver. In joycon_input_create(), input_register_device() was called before joycon_config_rumble() configured the FF_RUMBLE capability and the memless force-feedback device. This allowed a concurrent EVIOCSFF ioctl to dereference a...
CVE-2026-80771
In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: register input device after capabilities are set inputregisterdevice exposes the device to userspace immediately. In joyconinputcreate it was called before joyconconfigrumble configures the FFRUMBLE capability and...
CVE-2026-80771 HID: nintendo: register input device after capabilities are set
In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: register input device after capabilities are set inputregisterdevice exposes the device to userspace immediately. In joyconinputcreate it was called before joyconconfigrumble configures the FFRUMBLE capability and...
EUVD-2026-71413
In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: stop device IO before hidhwstop on probe failure nintendohidprobe calls hiddeviceiostart before joyconinit and joyconledscreate. If either fails, the error path jumps to errclose which calls hidhwclose/hidhwstop...
CVE-2026-80770
CVE-2026-80770 affects the Linux kernel Nintendo HID driver (Joy-Con). In nintendo_hid_probe(), when joycon_init() or joycon_leds_create() fails after hid_device_io_start(), the error path calls hid_hw_close()/hid_hw_stop() without first calling hid_device_io_stop(). Since hid_hw_stop() does not ...
CVE-2026-80770 HID: nintendo: stop device IO before hid_hw_stop on probe failure
In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: stop device IO before hidhwstop on probe failure nintendohidprobe calls hiddeviceiostart before joyconinit and joyconledscreate. If either fails, the error path jumps to errclose which calls hidhwclose/hidhwstop...
CVE-2026-80770
In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: stop device IO before hidhwstop on probe failure nintendohidprobe calls hiddeviceiostart before joyconinit and joyconledscreate. If either fails, the error path jumps to errclose which calls hidhwclose/hidhwstop...
Linux Distros Unpatched Vulnerability : CVE-2026-80772
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: nintendo: fix out-of-bounds read in joyconctlrreadhandler joyconctlrreadhandler casts an incoming HID input report to struct joyconinputreport and parses...
Linux Distros Unpatched Vulnerability : CVE-2026-80770
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: nintendo: stop device IO before hidhwstop on probe failure nintendohidprobe calls hiddeviceiostart before joyconinit and joyconledscreate. If either fails,...
Linux Distros Unpatched Vulnerability : CVE-2026-80771
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: nintendo: register input device after capabilities are set inputregisterdevice exposes the device to userspace immediately. In joyconinputcreate it was...
Malicious Package
Overview nintendoamerica-ncom is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
The vulnerability of the joycon_set_rumble() function in the drivers/hid/hid-nintendo.c module of the input device subsystem of the Linux operating system allows a hacker to induce a service failure.
The vulnerability of the joyconsetrumble function in the drivers/hid/hid-nintendo.c module of the Linux kernel subsystem for user interface devices is related to pointer manipulation. Exploiting this vulnerability could allow a attacker to cause a system failure...
CVE-2024-34454
Nintendo Wii U OS 5.5.5 allows man-in-the-middle attackers to forge SSL certificates as though they came from a Root CA, because there is a secondary verification mechanism that only checks whether a CA is known and ignores the CA details and signature and because is accepted as a Common Name...
Malicious code in nintendo-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cda34da72431c60b59efa32942146b3a3608477e9eead83ede6f5bb662ed82a0 The package nintendo-test was found to contain malicious code...
MAL-2025-192823 Malicious code in nintendo-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cda34da72431c60b59efa32942146b3a3608477e9eead83ede6f5bb662ed82a0 The package nintendo-test was found to contain malicious code...
