Memory Leak in Linux Kernel Affecting gpiolib Functionality

CVE-2026-99190

What is CVE-2026-99190?

A vulnerability in the Linux kernel's gpiolib has been identified, which can lead to a potential memory leak during error handling processes. Specifically, in the gpiod_set_array_value_complex() function, an error occurring after a failed call to gpiochip_set_multiple() can result in the function exiting prematurely, without releasing previously allocated bitmaps. This oversight could lead to accumulation of unused memory over time, impacting system performance. To mitigate this issue, it is necessary to adjust the return code handling in the affected code block, ensuring that resources are freed appropriately before any early exit.

References