ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type stream_config is not initialized before being passed to sdw_stream_add_slave(). The type field may contain garbage and is later copied to stream->type by sdw_config_stream(). Zero-initialize stream_config so type defaults to SDW_STREAM_PCM. While at it, use snd_sdw_params_to_config() helper instead of open-coding the same logic.
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 6.12.112, 6.18.54, 6.6.158, 7.2.8
- CVEs
- CVE-2026-98263
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 4 Nov 2026, 22:59 UTC · Revision 1
Source evidence
ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type
core-osv · Original sourcePublished 6 Oct 2026, 08:45 UTC
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type stream_config is not initialized before being passed to sdw_stream_add_slave(). The type field may contain garbage and is later copied to stream->type by sdw_config_stream(). Zero-initialize stream_config so type defaults to SDW_STREAM_PCM. While at it, use snd_sdw_params_to_config() helper instead of open-coding the same logic.
osv:CVE-2026-98263
Kernel
Fixed versions: 6.6.158, 6.12.112, 6.18.54, 7.2.8
Complete source record
{
"id": "db2ee008adb249582eebcb17e395e173b0cee092d3e81b8af3dee11d33c46b1f",
"url": "https://osv.dev/vulnerability/CVE-2026-98263",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type",
"summary": "In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type stream_config is not initialized before being passed to sdw_stream_add_slave(). The type field may contain garbage and is later copied to stream->type by sdw_config_stream(). Zero-initialize stream_config so type defaults to SDW_STREAM_PCM. While at it, use snd_sdw_params_to_config() helper instead of open-coding the same logic.",
"evidence": "osv:CVE-2026-98263",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "6.6.158",
"evidence": "/affected/1/ranges"
},
{
"value": "6.12.112",
"evidence": "/affected/1/ranges"
},
{
"value": "6.18.54",
"evidence": "/affected/1/ranges"
},
{
"value": "7.2.8",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CVE-2026-98263",
"aliases": [
"CVE-2026-98263"
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "63a511284c9ea72696a5dd0a2d2721bdef19f774"
},
{
"fixed": "6507055733a9d397289277408b52daf422f8a814"
},
{
"fixed": "c144447c207e2be24d6ac86d544691ba464caad8"
},
{
"fixed": "d93988c9e58d37b677f6ee8aceae741c8d1e30ad"
},
{
"fixed": "a318ee718e7448cd6bf62d9b3197b6a6a8d4701e"
},
{
"fixed": "03a5699a0a04309c597683967aaaf25d1e555ea2"
}
]
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98263.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.4.0"
},
{
"fixed": "6.6.158"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.7.0"
},
{
"fixed": "6.12.112"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.13.0"
},
{
"fixed": "6.18.54"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.19.0"
},
{
"fixed": "7.2.8"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98263.json"
}
}
],
"modified": "2026-10-28T02:30:40.171287Z",
"provider": "osv",
"references": [
"https://git.kernel.org/stable/c/03a5699a0a04309c597683967aaaf25d1e555ea2",
"https://git.kernel.org/stable/c/6507055733a9d397289277408b52daf422f8a814",
"https://git.kernel.org/stable/c/a318ee718e7448cd6bf62d9b3197b6a6a8d4701e",
"https://git.kernel.org/stable/c/c144447c207e2be24d6ac86d544691ba464caad8",
"https://git.kernel.org/stable/c/d93988c9e58d37b677f6ee8aceae741c8d1e30ad",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98263.json",
"https://nvd.nist.gov/vuln/detail/CVE-2026-98263",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98263.json"
}
},
"related_cves": [
{
"value": "CVE-2026-98263",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 507790,
"published_at": "2026-10-06T08:45:26.884+00:00"
}