CVE-2026-64143: Linux Kernel Privilege Escalation Flaw

CVE-2026-64143 Overview

CVE-2026-64143 affects the Linux kernel's platform/x86: uniwill-laptop driver. The vulnerability relates to a battery charging limit feature that can permanently damage batteries on certain older Uniwill-based laptop models manufactured around 2020. The kernel maintainers resolved the issue by preventing users from enabling the feature through the force module parameter. This safeguard blocks a code path that could cause irreversible hardware damage to affected devices.

Critical Impact
Enabling the battery charging limit on affected Uniwill laptop models can cause permanent physical damage to the battery hardware, resulting in device availability loss and unrecoverable component failure.

Affected Products

Linux kernel platform/x86 subsystem — uniwill-laptop driver
Older Uniwill-based laptop models manufactured around 2020
Systems loading the uniwill-laptop module with the force parameter

Discovery Timeline

2026-07-19 - CVE-2026-64143 published to NVD
2026-07-19 - Last updated in NVD database

Technical Details for CVE-2026-64143

Vulnerability Analysis

The uniwill-laptop driver exposes a battery charging limit feature intended to cap the maximum charge level of the battery. On certain older Uniwill hardware from approximately 2020, applying this limit through the embedded controller interface causes permanent physical damage to the battery cells. The failure mode is hardware-level and cannot be reversed through software recovery. The vulnerability falls under the category of insecure default configuration combined with a hardware driver vulnerability [CWE-1277 style firmware/driver interaction issue].

The driver previously allowed administrators to override safety checks using a force module parameter. This bypass could be applied even on hardware known to be susceptible to battery damage. The fix removes the force escape hatch for the charging limit feature to prevent users from triggering the damaging behavior on unsafe hardware.

Root Cause

The root cause is a mismatch between the driver-exposed charging limit feature and the physical tolerance of the battery firmware on older Uniwill boards. The embedded controller accepts the charging limit command and applies it in a way that induces permanent battery cell degradation. The force module parameter allowed users to bypass hardware compatibility checks, exposing them to the destructive behavior.

Attack Vector

Exploitation requires local root privileges to load or configure the kernel module with the force parameter. This is not a remote or unauthenticated attack. The primary risk is unintentional damage by users or administrators unaware of hardware compatibility issues, rather than adversarial exploitation. Refer to the upstream commits at kernel.org commit 26cbe119 and kernel.org commit c832a00c for the code change.

No verified proof-of-concept code is available. The vulnerability manifests through normal use of the documented module parameter rather than through a crafted exploit payload.

Detection Methods for CVE-2026-64143

Indicators of Compromise

Presence of the uniwill-laptop kernel module loaded with a force parameter value in /proc/modules or modinfo output.
Configuration entries in /etc/modprobe.d/ that set options uniwill-laptop force=1 or similar values.
Kernel log entries from dmesg referencing the uniwill-laptop driver applying a battery charging limit.

Detection Strategies

Inventory Linux endpoints for the running kernel version and cross-reference against the patched stable branches referenced in the upstream commits.
Audit module load configurations across managed Linux hosts for use of force parameters on platform drivers.
Monitor SMART battery telemetry and ACPI battery health readings for unexpected capacity degradation on Uniwill-based hardware.

Monitoring Recommendations

Collect dmesg and journalctl output centrally and alert on uniwill-laptop driver initialization messages.
Track kernel package versions across the fleet through configuration management to identify unpatched hosts.
Include battery health metrics in endpoint telemetry pipelines to surface hardware anomalies early.

How to Mitigate CVE-2026-64143

Immediate Actions Required

Update affected Linux systems to a kernel version that includes the fixes in commits 26cbe119f99c and c832a00c9b92.
Remove any force parameter references for uniwill-laptop from /etc/modprobe.d/ configuration files.
Identify Uniwill-based laptop hardware in the environment and prioritize patching those systems.

Patch Information

The Linux kernel maintainers merged fixes in the stable tree. See kernel.org commit 26cbe119f99c and kernel.org commit c832a00c9b92. Apply the corresponding stable kernel update from your distribution vendor.

Workarounds

Do not load the uniwill-laptop module with force=1 or any override enabling the charging limit on pre-fix kernels.
Blacklist the uniwill-laptop module on affected hardware until the patched kernel is deployed.
Restrict root and module-loading privileges to prevent accidental configuration of the force parameter.

bash

# Blacklist the uniwill-laptop module until the patched kernel is installed
echo "blacklist uniwill-laptop" | sudo tee /etc/modprobe.d/blacklist-uniwill.conf
sudo update-initramfs -u

# Verify no force parameter is configured
grep -R "uniwill-laptop" /etc/modprobe.d/

# Confirm kernel version after update
uname -r