DEBIAN-CVE-2026-99190: Debian/linux vulnerability
Published Oct 28, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved: gpiolib: fix memory leak in gpiodsetarrayvaluecomplex() on error paths A drive-by review by Sashiko reports that, after a failed call to gpiochipsetmultiple(), gpiodsetarrayvalue() returns abruptly, bypassing the freeing of possibly alloced bitmaps, potentially leaking memory. It is an unlikely error path, but is possible. Defer the return code check until after the bitmapfree() block.
Affected Software
1 affected component
debian/linux*
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Defer the return code check until after the bitmap_free() block so allocated bitmaps are freed when gpiochip_set_multiple() fails.
Event History
Oct 28, 2026
CVE Published
via OSV·11:17 AM
Data Sourced
via OSV·11:17 AM
DescriptionAffected Software