Vulnerability in Linux

[ Description ]Official description

In the Linux kernel, the following vulnerability has been resolved: gpiolib: fix memory leak in gpiod_set_array_value_complex() on error paths A drive-by review by Sashiko reports that, after a failed call to gpiochip_set_multiple(), gpiod_set_array_value() returns abruptly, bypassing the freeing of possibly alloced bitmaps, potentially leaking memory. It is an unlikely error path, but is possible. Defer the return code check until after the bitmap_free() block.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• BSI CERT-Bund28 Oct 2026WID-SEC-2026-4224

  Linux Kernel: Multiple vulnerabilities allow an unspecified attack Translated from German

  CVE-2026-99116CVE-2026-99143CVE-2026-99170+113 more CVEs

[ References ]References

• git.kernel.org/stable/c/68a2cd5381b8d89dc80bd16dd9cc9ca2d5c25e7f
• git.kernel.org/stable/c/78189c0e35abbcdab3b8ab0b764d578c02900734
• git.kernel.org/stable/c/890c3bf08e0fc09eff788a6cfeded7d21b4d3e9d
• git.kernel.org/stable/c/c28846ca1ac6134881114d272314623c8433e372