Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-98744

ASoC: codecs: max98363: fix uninitialized stream_config->type

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: max98363: fix uninitialized stream_config->type stream_config is not initialized before being passed to sdw_stream_add_slave(). The type field may contain garbage and is later copied to stream->type by sdw_config_stream(). Zero-initialize stream_config so type defaults to SDW_STREAM_PCM.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 18c0af945fa35766730d3f729adcf417a3d1ad5d to < a756c93fae312cc2bcdf157a0992e505573c530faffected
  • 18c0af945fa35766730d3f729adcf417a3d1ad5d to < 1c251426bb67de5cbfd3b5550bd5983736e8b9c7affected
  • 18c0af945fa35766730d3f729adcf417a3d1ad5d to < 7df8c39a50f364c04d68881e61ba1ecad29d4b72affected
  • 18c0af945fa35766730d3f729adcf417a3d1ad5d to < f44ba04c7a32bd13dbdcd814385b8629d0ee95e3affected
  • 18c0af945fa35766730d3f729adcf417a3d1ad5d to < bcd61aa247c28b721ac21dda6e4135f75a2de29faffected

Linux Linux

Default version status: affected

  • 6.4affected
  • 0 to < 6.4unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.12.113 to ≤ 6.12.*unaffected
  • 6.18.56 to ≤ 6.18.*unaffected
  • 7.2.10 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References