What is the CVSS score of CVE-2026-64143?

CVE-2026-64143 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.2%.

Is there a patch available for CVE-2026-64143?

Yes, a patch is available for CVE-2026-64143. Update the affected software to the latest version immediately.

Linux Kernel CVE-2026-64143

EUVD-2026-45828 MEDIUM

2026-07-19 Linux

GHSA-w2wv-4g8x-3fv9

Information Disclosure Linux Red Hat Suse

5.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

vuln.today AI

4.4 MEDIUM

Setting kernel module parameters at load time requires root (PR:H); no confidentiality or integrity impact applies, only permanent hardware availability loss.

3.1 AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

4.0 AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SUSE

4.4 MEDIUM

AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 17, 2026 - 22:01 vuln.today

CVSS changed

Aug 17, 2026 - 19:52 NVD

5.5 (MEDIUM)

Patch available

Jul 19, 2026 - 17:03 EUVD

CVE Published

Jul 19, 2026 - 15:40 nvd

MEDIUM 5.5

CVE Published

Jul 19, 2026 - 15:40 cve.org

UNKNOWN (no severity yet)

DescriptionNVD

In the Linux kernel, the following vulnerability has been resolved:

platform/x86: uniwill-laptop: Do not enable the charging limit even when forced

It seems that on some older models (~2020) the battery charging limit can permanently damage the battery. Prevent users from enabling this feature thru the "force" module parameter to avoid causing permanent hardware damage on such devices.

AnalysisAI

Permanent battery hardware damage on Uniwell-based laptops can be triggered via the platform/x86/uniwill-laptop kernel driver by enabling the battery charging limit through the 'force' module parameter. Affected hardware is limited to older Uniwell OEM models manufactured around 2020 where the charging limit circuitry is incompatible with the feature and causes irreversible battery degradation. No public exploit exists and EPSS stands at 0.16% (6th percentile), reflecting the narrow hardware and configuration prerequisites; however, the impact is severe and permanent - affected batteries cannot be recovered once damaged.

Technical ContextAI

The Linux kernel's platform/x86/uniwill-laptop driver provides integration for Uniwell OEM laptops (often rebranded as Tuxedo, Slimbook, and BMAX devices). The driver exposes a battery charging limit feature controllable via a 'force' kernel module parameter. The root cause is not a classic software memory-safety bug (CWE is listed N/A) but rather a hardware compatibility defect: on ~2020-era Uniwell hardware, the charging limit control path sends a command to the embedded controller or battery management IC that is misinterpreted, causing permanent electrochemical damage to the battery cell. The affected CPE is cpe:2.3:a:linux:linux:*:*:*:*:*:*:*:*, indicating all Linux kernel builds containing the vulnerable driver code from the introducing commit d050479693bb91da5a0e305ca9dd59f4c0b55dd3 forward until the respective stable fixes.

RemediationAI

The primary fix is to upgrade the Linux kernel to a patched release: 7.1, 7.0.11, or 6.19 as confirmed by EUVD data. The upstream patches are available at https://git.kernel.org/stable/c/c832a00c9b929b9ad26772833d425f520b2e09cd and https://git.kernel.org/stable/c/26cbe119f99c86dcb4a0136d2bc73c0c716d80e4. Ubuntu users should apply USN-8593-1 immediately via standard package updates. As a compensating control before patching, administrators can prevent loading of the 'force' parameter by blacklisting the module parameter in /etc/modprobe.d/ with 'options univill_laptop force=0', which prevents the dangerous code path from being activated; the trade-off is that the battery charging limit feature becomes unavailable for all users on the system. Restricting write permissions on the relevant sysfs parameter node is an additional hardening measure but should not be relied upon alone. Do not attempt to re-enable the force parameter on pre-patch kernels on affected hardware under any circumstances.

Same technique Information Disclosure

View all

CVE-2019-2725 CRITICAL POC

9.8

CVE-2021-34523 CRITICAL POC

9.0

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

Vendor StatusVendor

SUSE

Severity: Moderate

Product	Status
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 16.0	Not-Affected

CVE-2026-64143 vulnerability details – vuln.today

Back

Linux Kernel CVE-2026-64143

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

RemediationAI

Same technique Information Disclosure

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code