CVE-2026-0143
Awaiting Analysis Awaiting Analysis - Queue
Memory Corruption in Linux Kernel LWIS Driver

Publication date: 2026-06-16

Last updated on: 2026-06-16

Assigner: Google Devices

Description
In lwis_device_external_event_emit of lwis_event.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-06-16
Last Modified
2026-06-16
Generated
2026-06-17
AI Q&A
2026-06-16
EPSS Evaluated
N/A
NVD
CVE-2026-0143
EUVD
EUVD-2026-37177
Affected Vendors & Products
Currently, no data is known.
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability occurs in the function lwis_device_external_event_emit within the lwis_event.c file. It involves a possible memory corruption caused by a use after free error.

A use after free means that the program continues to use memory after it has been freed, which can lead to unpredictable behavior or exploitation.

Impact Analysis

Exploitation of this vulnerability could allow an attacker to escalate their privileges locally on the affected system.

Specifically, the attacker could gain System execution privileges, which are high-level permissions that allow full control over the system.

User interaction is not required for exploitation, meaning the attacker can exploit this vulnerability without any action from the user.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-0143. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart