Update: - upstream kernel 4.3.3 (most probably Debian also) and many kernels (probably all) between, at least and inclusive on both ends, versions 4.0.2 and 4.3.3 are affected by this bug; - upstream kernel 4.5.5 is *not affected*; Debian kernels 4.5.4-1 and 4.5.5-1 are *not affected* either (the axes numbers have changed since 3.16.7, I believe, but this is a minor inconvenience); - Benjamin Tissoires replied to me; - why recent kernels are not affected is still unclear, because the code from commit 79346d620e9de87912de73337f6df8b7f9a46888 is still there---I imagine that some change between 4.3.3 and 4.5.4 maybe causes the DragonRise joypad to use a code path that doesn't go through the lines added by said commit; - I offered to build a patched kernel with debug statements to clarify this point.
-- Florent