CVE-2026-98743 PUBLISHED

ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type

Assigner: Linux
Reserved: 25.09.2026 Published: 18.10.2026 Updated: 18.10.2026

In the Linux kernel, the following vulnerability has been resolved:

ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type

stream_config is not initialized before being passed to sdw_stream_add_slave(). The type field may contain garbage and is later copied to stream->type by sdw_config_stream().

Zero-initialize stream_config so type defaults to SDW_STREAM_PCM.

While at it, use snd_sdw_params_to_config() helper instead of open-coding the same logic.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 2b7aecd58528551e6e3da58091ff7ceb4718e6be to 4e337c24c0a97fcdb394f954208971de5d372066 (excl.)
  • affected from 2b7aecd58528551e6e3da58091ff7ceb4718e6be to d195c8c763fdd0a7f74a34973f8946215a708f1e (excl.)
  • affected from 2b7aecd58528551e6e3da58091ff7ceb4718e6be to 7791ebf56eb4ab6b7a20252757a3029bc8068715 (excl.)
  • affected from 2b7aecd58528551e6e3da58091ff7ceb4718e6be to 174d160884199cad97413f33fe1b56027dc0d3e1 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.6 is affected
  • unaffected from 0 to 6.6 (excl.)
  • unaffected from 6.12.113 to 6.12.* (incl.)
  • unaffected from 6.18.56 to 6.18.* (incl.)
  • unaffected from 7.2.10 to 7.2.* (incl.)
  • unaffected from 7.3-rc6 to * (incl.)

References