CVE-2026-0143
Awaiting Analysis Awaiting Analysis - Queue

Memory Corruption in Linux Kernel LWIS Driver

Publication date: 2026-06-16

Last updated on: 2026-06-16

Assigner: Google Devices

Description
In lwis_device_external_event_emit of lwis_event.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-06-16
Last Modified
2026-06-16
Generated
2026-07-07
AI Q&A
2026-06-16
EPSS Evaluated
2026-07-05
NVD
CVE-2026-0143
EUVD
EUVD-2026-37177

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability occurs in the function lwis_device_external_event_emit within the lwis_event.c file. It involves a possible memory corruption caused by a use after free error.

A use after free means that the program continues to use memory after it has been freed, which can lead to unpredictable behavior or exploitation.

Impact Analysis

Exploitation of this vulnerability could allow an attacker to escalate their privileges locally on the affected system.

Specifically, the attacker could gain System execution privileges, which are high-level permissions that allow full control over the system.

User interaction is not required for exploitation, meaning the attacker can exploit this vulnerability without any action from the user.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-0143. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart