Strix
73.2K

CVE-2026-99190

UnknownEPSS 0.18%

Last modified

CVE-2026-99190 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: gpiolib: fix memory leak in gpiod_set_array_value_complex() on error paths A drive-by review by Sashiko reports that, after a failed call to gpiochip_set_multiple(), gpiod_set_array_value() returns abruptly, bypassing the freeing of possibly alloced bitmaps, potentially leaking memory. It is an unlikely error path, but is possible. Defer the return code check until after the bitmap_free() block.. EPSS estimates a 0.18% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: gpiolib: fix memory leak in gpiod_set_array_value_complex() on error paths A drive-by review by Sashiko reports that, after a failed call to gpiochip_set_multiple(), gpiod_set_array_value() returns abruptly, bypassing the freeing of possibly alloced bitmaps, potentially leaking memory. It is an unlikely error path, but is possible. Defer the return code check until after the bitmap_free() block.

Metrics

EPSS Probability
0.18%

7.2th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= d73d2a569e6212f58d89efc6e66ffbb2386a47b1, < 68a2cd5381b8d89dc80bd16dd9cc9ca2d5c25e7f; >= 9b407312755fd5db012413ca005f0f3a661db8dd, < 78189c0e35abbcdab3b8ab0b764d578c02900734; >= 9b407312755fd5db012413ca005f0f3a661db8dd, < 890c3bf08e0fc09eff788a6cfeded7d21b4d3e9d; >= 9b407312755fd5db012413ca005f0f3a661db8dd, < c28846ca1ac6134881114d272314623c8433e372; >= 6.12.114, < 6.12.115
LinuxLinux6.15

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-99190?
In the Linux kernel, the following vulnerability has been resolved: gpiolib: fix memory leak in gpiod_set_array_value_complex() on error paths A drive-by review by Sashiko reports that, after a failed call to gpiochip_set_multiple(), gpiod_set_array_value() returns abruptly, bypassing the freeing of possibly alloced bitmaps, potentially leaking memory. It is an unlikely error path, but is possible. Defer the return code check until after the bitmap_free() block.
How severe is CVE-2026-99190?
Severity scoring for CVE-2026-99190 is pending analysis. The EPSS model estimates a 0.18% probability of exploitation in the next 30 days.
How do I fix CVE-2026-99190?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-99190?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST