CVE-2026-64143

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-64143", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-07-19T07:54:57.037Z", "datePublished": "2026-07-19T15:40:35.337Z", "dateUpdated": "2026-07-19T15:40:35.337Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-07-19T15:40:35.337Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: uniwill-laptop: Do not enable the charging limit even when forced\n\nIt seems that on some older models (~2020) the battery charging limit\ncan permanently damage the battery. Prevent users from enabling this\nfeature thru the \"force\" module parameter to avoid causing permanent\nhardware damage on such devices."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["Documentation/admin-guide/laptops/uniwill-laptop.rst", "drivers/platform/x86/uniwill/uniwill-acpi.c"], "versions": [{"version": "d050479693bb91da5a0e305ca9dd59f4c0b55dd3", "lessThan": "c832a00c9b929b9ad26772833d425f520b2e09cd", "status": "affected", "versionType": "git"}, {"version": "d050479693bb91da5a0e305ca9dd59f4c0b55dd3", "lessThan": "26cbe119f99c86dcb4a0136d2bc73c0c716d80e4", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["Documentation/admin-guide/laptops/uniwill-laptop.rst", "drivers/platform/x86/uniwill/uniwill-acpi.c"], "versions": [{"version": "6.19", "status": "affected"}, {"version": "0", "lessThan": "6.19", "status": "unaffected", "versionType": "semver"}, {"version": "7.0.11", "lessThanOrEqual": "7.0.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.19", "versionEndExcluding": "7.0.11"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.19", "versionEndExcluding": "7.1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/c832a00c9b929b9ad26772833d425f520b2e09cd"}, {"url": "https://git.kernel.org/stable/c/26cbe119f99c86dcb4a0136d2bc73c0c716d80e4"}], "title": "platform/x86: uniwill-laptop: Do not enable the charging limit even when forced", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["Documentation/admin-guide/laptops/uniwill-laptop.rst", "drivers/platform/x86/uniwill/uniwill-acpi.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "c832a00c9b929b9ad26772833d425f520b2e09cd", "status": "affected", "version": "d050479693bb91da5a0e305ca9dd59f4c0b55dd3", "versionType": "git"}, {"lessThan": "26cbe119f99c86dcb4a0136d2bc73c0c716d80e4", "status": "affected", "version": "d050479693bb91da5a0e305ca9dd59f4c0b55dd3", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["Documentation/admin-guide/laptops/uniwill-laptop.rst", "drivers/platform/x86/uniwill/uniwill-acpi.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.19"}, {"lessThan": "6.19", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "7.0.*", "status": "unaffected", "version": "7.0.11", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.1", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "0520D091-FC52-4A50-AF07-70AE7D08B750", "versionEndExcluding": "7.0.11", "versionStartIncluding": "6.19", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*", "matchCriteriaId": "B1EF7059-E670-45F4-B422-54C40FA86390", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*", "matchCriteriaId": "0D38F0BF-A728-4133-A358-D44A2F7EE6D6", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*", "matchCriteriaId": "EC732D08-5F7B-46D9-B154-E60C7F4F0A97", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:*", "matchCriteriaId": "E5910A9D-F60A-409A-B486-FE66BFEBA9B9", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: uniwill-laptop: Do not enable the charging limit even when forced\n\nIt seems that on some older models (~2020) the battery charging limit\ncan permanently damage the battery. Prevent users from enabling this\nfeature thru the \"force\" module parameter to avoid causing permanent\nhardware damage on such devices."}], "id": "CVE-2026-64143", "lastModified": "2026-08-17T19:39:52.783", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2026-07-19T16:17:56.243", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/26cbe119f99c86dcb4a0136d2bc73c0c716d80e4"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/c832a00c9b929b9ad26772833d425f520b2e09cd"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: platform/x86: uniwill-laptop: Do not enable the charging limit even when forced", "id": "2502502", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502502"}, "csaw": false, "cwe": "CWE-920", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nplatform/x86: uniwill-laptop: Do not enable the charging limit even when forced\nIt seems that on some older models (~2020) the battery charging limit\ncan permanently damage the battery. Prevent users from enabling this\nfeature thru the \"force\" module parameter to avoid causing permanent\nhardware damage on such devices.", "A flaw was found in the Linux kernel's Uniwill laptop driver. This vulnerability allows a local user to potentially cause permanent damage to the battery on certain older Uniwill laptop models. The issue arises when the battery charging limit feature is enabled through a 'force' module parameter, as some devices do not properly implement this interface. Preventing the use of this feature, even when forced, avoids irreversible hardware damage."], "name": "CVE-2026-64143", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-07-19T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-64143\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-64143\nhttps://lore.kernel.org/linux-cve-announce/2026071929-CVE-2026-64143-f5eb@gregkh/T"]}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[d050479693bb91da5a0e305ca9dd59f4c0b55dd3,c832a00c9b929b9ad26772833d425f520b2e09cd)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[d050479693bb91da5a0e305ca9dd59f4c0b55dd3,26cbe119f99c86dcb4a0136d2bc73c0c716d80e4)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "6.19"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.19)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.0.11,7.0.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-07-22T03:00:10.255272+00:00", "updated": "2026-08-17T22:00:03.869493+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}