CVE-2026-98263: ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type
ASoC: codecs: rt712-sdca-dmic: fix uninitialized streamconfig->type
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.158.1-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1 - Upgrade
Upgrade
debian/linux-6.12to a version that resolves this vulnerability.Fixed in 6.12.113-1~deb12u1 - Upgrade
Upgrade
ubuntu/linux-hwe-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-42.42~24.04.1 - Upgrade
Upgrade
ubuntu/linux-riscv-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-42.42.1~24.04.1 - Upgrade
Upgrade
ubuntu/linuxto a version that resolves this vulnerability.Fixed in 7.0.0-42.42 - Upgrade
Upgrade
ubuntu/linux-awsto a version that resolves this vulnerability.Fixed in 7.0.0-1016.17 - Upgrade
Upgrade
ubuntu/linux-gcpto a version that resolves this vulnerability.Fixed in 7.0.0-1016.18 - Upgrade
Upgrade
ubuntu/linux-ibmto a version that resolves this vulnerability.Fixed in 7.0.0-1017.17 - Upgrade
Upgrade
ubuntu/linux-oem-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-1017.17 - Upgrade
Upgrade
ubuntu/linux-oracleto a version that resolves this vulnerability.Fixed in 7.0.0-1015.16 - Upgrade
Upgrade
ubuntu/linux-riscvto a version that resolves this vulnerability.Fixed in 7.0.0-42.42.1 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.6.158 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.12.112 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.18.54 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 7.2.8 - Configuration
Zero-initialize stream_config before passing it to sdw_stream_add_slave(), and use snd_sdw_params_to_config() instead of open-coding the same logic.
Linux kernel ASoC codec rt712-sdca-dmic stream_config initialization = zero-initialized; type defaults to SDW_STREAM_PCM
Event History
Frequently Asked Questions
Which systems are exposed to this issue?
Systems using the Linux kernel ASoC rt712-sdca-dmic codec driver are exposed when the affected driver path creates a SoundWire stream. The issue concerns an uninitialized stream configuration field in that driver.
What condition triggers the faulty behavior?
The condition occurs when stream_config is passed to sdw_stream_add_slave() without first being initialized. Its type field can contain residual memory contents, which are subsequently copied into stream->type.
What should the stream type be after the fix?
The fix zero-initializes stream_config, causing the type field to default to SDW_STREAM_PCM. It also replaces duplicated configuration logic with snd_sdw_params_to_config().
How can I determine whether a kernel includes the fix?
Check whether the kernel source or applied stable patches includes one of the referenced commits: 6507055733a9d397289277408b52daf422f8a814, c144447c207e2be24d6ac86d544691ba464caad8, or d93988c9e58d37b677f6ee8aceae741c8d1e30ad.