Linux Kernel: gpiolib Memory Leak via gpiod_set_array_value_complex()
CVE-2026-99190 Published on October 28, 2026
gpiolib: fix memory leak in gpiod_set_array_value_complex() on error paths
In the Linux kernel, the following vulnerability has been resolved:
gpiolib: fix memory leak in gpiod_set_array_value_complex() on error paths
A drive-by review by Sashiko reports that, after a failed call to
gpiochip_set_multiple(), gpiod_set_array_value() returns abruptly,
bypassing the freeing of possibly alloced bitmaps, potentially leaking
memory. It is an unlikely error path, but is possible.
Defer the return code check until after the bitmap_free() block.
Products Associated with CVE-2026-99190
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version 9b407312755fd5db012413ca005f0f3a661db8dd and below 78189c0e35abbcdab3b8ab0b764d578c02900734 is affected.
- Version 9b407312755fd5db012413ca005f0f3a661db8dd and below 890c3bf08e0fc09eff788a6cfeded7d21b4d3e9d is affected.
- Version 9b407312755fd5db012413ca005f0f3a661db8dd and below c28846ca1ac6134881114d272314623c8433e372 is affected.
- Version d73d2a569e6212f58d89efc6e66ffbb2386a47b1 is affected.
- Version 6.12.114 and below 6.13 is affected.
- Version 6.15 is affected.
- Before 6.15 is unaffected.
- Version 6.18.59, <= 6.18.* is unaffected.
- Version 7.2.13, <= 7.2.* is unaffected.
- Version 7.3, <= * is unaffected.