HomeDefectsLIN1022-40086
Fixed

LIN1022-40086 : Security Advisory - linux - CVE-2026-99190

Created: Oct 29, 2026    Updated: Nov 4, 2026
Resolved Date: Nov 3, 2026
Found In Version: 10.22.33.2
Fix Version: 10.22.33.11
Severity: Standard
Applicable for: Wind River Linux LTS 22
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:  gpiolib: fix memory leak in gpiod_set_array_value_complex() on error paths  A drive-by review by Sashiko reports that, after a failed call to gpiochip_set_multiple(), gpiod_set_array_value() returns abruptly, bypassing the freeing of possibly alloced bitmaps, potentially leaking memory. It is an unlikely error path, but is possible.  Defer the return code check until after the bitmap_free() block.
Data source: kernel.org (416baaa9-dc9f-4396-8d5f-8c081fb06d67)

CVEs