CVE-2026-98744: ASoC: codecs: max98363: fix uninitialized stream_config->type
Published Oct 18, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
ASoC: codecs: max98363: fix uninitialized streamconfig->type
streamconfig is not initialized before being passed to sdwstreamaddslave(). The type field may contain garbage and is later copied to stream->type by sdwconfigstream().
Zero-initialize streamconfig so type defaults to SDWSTREAMPCM.
Affected Software
1 affected component
Linux Linux kernel
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Zero-initialize stream_config before passing it to sdw_stream_add_slave() so its type field defaults to SDW_STREAM_PCM before being copied to stream->type by sdw_config_stream().
Linux kernel ASOC codec max98363 stream_config initialization = zero-initialize; type defaults to SDW_STREAM_PCM
Event History
Oct 18, 2026
CVE Published
via MITRE·03:47 PM
Data Sourced
via MITRE·03:47 PM
Description
Data Sourced
via NVD·04:17 PM
Description