The Linux kernel contains a platform driver for Uniwill‑Laptop devices that exposes a module parameter allowing a forced charging limit. When set on older laptop models (circa 2020), the hardware cannot safely enforce this limit, causing irreversible battery damage that can render the device unusable. This flaw is an instance of CWE-920, Improper Input Validation, where the driver accepts an arbitrary parameter that can break hardware safety mechanisms.

Linux kernel installations that load the uniwill‑laptop driver on affected older laptops are impacted. The fix is included in recent stable kernel releases; any kernel built after the commit that disables the `force` option is considered mitigated. The driver is usually loaded as a module, and the force parameter can be set through configuration files such as /etc/modprobe.d or via modprobe commands, making the vulnerability contingent on local system configuration.

The EPSS score is below 1 % and the vulnerability is not listed in the CISA KEV catalog, indicating a very low likelihood of active exploitation. The most plausible attack vector is local privilege escalation or a user with root access who can load or reconfigure the unnecessary module parameter. Without such privileges, the flaw cannot be exploited, so the risk is primarily hardware degradation rather than a conventional security breach. The vulnerability does not provide a means to compromise confidentiality, integrity, or availability in the traditional sense.