Riskcovery

CVE-2026-98263

ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type

State
Published
Severity
Not scored
Published
Oct 6, 2026
Updated
Oct 19, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type

stream_config is not initialized before being passed to sdw_stream_add_slave(). The type field may contain garbage and is later copied to stream->type by sdw_config_stream().

Zero-initialize stream_config so type defaults to SDW_STREAM_PCM.

While at it, use snd_sdw_params_to_config() helper instead of open-coding the same logic.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 63a511284c9ea72696a5dd0a2d2721bdef19f774 to before 6507055733a9d397289277408b52daf422f8a814Affected
  • 63a511284c9ea72696a5dd0a2d2721bdef19f774 to before c144447c207e2be24d6ac86d544691ba464caad8Affected
  • 63a511284c9ea72696a5dd0a2d2721bdef19f774 to before d93988c9e58d37b677f6ee8aceae741c8d1e30adAffected
  • 63a511284c9ea72696a5dd0a2d2721bdef19f774 to before a318ee718e7448cd6bf62d9b3197b6a6a8d4701eAffected
  • 63a511284c9ea72696a5dd0a2d2721bdef19f774 to before 03a5699a0a04309c597683967aaaf25d1e555ea2Affected
LinuxLinux
  • 6.4Affected
  • before 6.4Not affected
  • 6.6.158 through 6.6.*Not affected
  • 6.12.112 through 6.12.*Not affected
  • 6.18.54 through 6.18.*Not affected
  • 7.2.8 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.