CVEvulnerability
CVE-2026-98744
- Status
- Received
- Published
- 2026-10-18
- Last modified
- 2026-10-21
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Description
In the Linux kernel, the following vulnerability has been resolved:
ASoC: codecs: max98363: fix uninitialized stream_config->type
stream_config is not initialized before being passed to
sdw_stream_add_slave(). The type field may contain garbage and is
later copied to stream->type by sdw_config_stream().
Zero-initialize stream_config so type defaults to SDW_STREAM_PCM.
References
- https://git.kernel.org/stable/c/1c251426bb67de5cbfd3b5550bd5983736e8b9c7 git.kernel.org
- https://git.kernel.org/stable/c/7df8c39a50f364c04d68881e61ba1ecad29d4b72 git.kernel.org
- https://git.kernel.org/stable/c/a756c93fae312cc2bcdf157a0992e505573c530f git.kernel.org
- https://git.kernel.org/stable/c/bcd61aa247c28b721ac21dda6e4135f75a2de29f git.kernel.org
- https://git.kernel.org/stable/c/f44ba04c7a32bd13dbdcd814385b8629d0ee95e3 git.kernel.org