vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-98744

ASoC: codecs: max98363: fix uninitialized stream_config->type

N/A
Published: October 18, 2026 at 03:47 PM UTC
Updated: October 21, 2026 at 01:21 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: max98363: fix uninitialized stream_config->type stream_config is not initialized before being passed to sdw_stream_add_slave(). The type field may contain garbage and is later copied to stream->type by sdw_config_stream(). Zero-initialize stream_config so type defaults to SDW_STREAM_PCM.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
90%
18c0af945fa35766730d3f729adcf417a3d1ad5d6.4
Vendor states this is fixed in 6.12.113 (unaffected)
Vendor states this is fixed in 6.18.56 (unaffected)
Vendor states this is fixed in 6.6.160 (unaffected)
Vendor states this is fixed in 7.2.10 (unaffected)
Vendor states this is fixed in 7.3 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (5)

Source: cverecord
https://git.kernel.org/stable/c/1c251426bb67de5cbfd3b5550bd5983736e8b9c7
Source: cverecord
https://git.kernel.org/stable/c/7df8c39a50f364c04d68881e61ba1ecad29d4b72
Source: cverecord
https://git.kernel.org/stable/c/f44ba04c7a32bd13dbdcd814385b8629d0ee95e3
Source: cverecord
https://git.kernel.org/stable/c/bcd61aa247c28b721ac21dda6e4135f75a2de29f
Source: cverecord
https://git.kernel.org/stable/c/a756c93fae312cc2bcdf157a0992e505573c530f

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card