CVE-2026-64143
Received Received - Intake

Linux Kernel Battery Charging Limit Bypass Vulnerability

Vulnerability report for CVE-2026-64143, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-07-19

Last updated on: 2026-07-19

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: platform/x86: uniwill-laptop: Do not enable the charging limit even when forced It seems that on some older models (~2020) the battery charging limit can permanently damage the battery. Prevent users from enabling this feature thru the "force" module parameter to avoid causing permanent hardware damage on such devices.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-19
Last Modified
2026-07-19
Generated
2026-07-20
AI Q&A
2026-07-19
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux_kernel linux_kernel to 2020 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves a flaw in the Linux kernel's uniwill-laptop driver where a forced battery charging limit feature could be enabled on older laptop models (~2020). Enabling this feature may cause permanent battery damage due to hardware limitations.

Detection Guidance

This vulnerability is specific to certain Linux kernel models and relates to battery charging limits. Detection involves checking the kernel version and module parameters. Run 'uname -r' to check the kernel version and 'lsmod | grep uniwill' to see if the affected module is loaded.

Impact Analysis

If you own an older laptop model (~2020) with a uniwill battery, enabling the charging limit feature could permanently damage your battery. This may reduce battery lifespan or cause it to fail entirely.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It involves a hardware protection mechanism in the Linux kernel for battery charging limits on certain laptop models, which could cause permanent battery damage if misused. There is no indication of data exposure, privacy risks, or regulatory violations associated with this issue.

Mitigation Strategies

To mitigate, avoid using the 'force' module parameter for the uniwill-laptop driver. Update the Linux kernel to the patched version if available. If the module is loaded, consider unloading it with 'modprobe -r uniwill'.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64143. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart