---
id: CVE-2026-98744
title: 'ASoC: codecs: max98363: fix uninitialized stream_config->type'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ASoC: codecs: max98363: fix uninitialized stream_config->type

  stream_config is not initialized before being passed to
  sdw_stream_add_slave().  The type field may conta…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 18c0af945fa35766730d3f729adcf417a3d1ad5d <
    1c251426bb67de5cbfd3b5550bd5983736e8b9c7
  - >-
    Linux >= 18c0af945fa35766730d3f729adcf417a3d1ad5d <
    7df8c39a50f364c04d68881e61ba1ecad29d4b72
  - >-
    Linux >= 18c0af945fa35766730d3f729adcf417a3d1ad5d <
    f44ba04c7a32bd13dbdcd814385b8629d0ee95e3
  - >-
    Linux >= 18c0af945fa35766730d3f729adcf417a3d1ad5d <
    bcd61aa247c28b721ac21dda6e4135f75a2de29f
  - Linux 6.4
published: '2026-10-18'
updated: '2026-10-18'
sourceUpdated: '2026-10-18T15:47:29.706Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-98744'
references:
  - url: 'https://git.kernel.org/stable/c/1c251426bb67de5cbfd3b5550bd5983736e8b9c7'
  - url: 'https://git.kernel.org/stable/c/7df8c39a50f364c04d68881e61ba1ecad29d4b72'
  - url: 'https://git.kernel.org/stable/c/f44ba04c7a32bd13dbdcd814385b8629d0ee95e3'
  - url: 'https://git.kernel.org/stable/c/bcd61aa247c28b721ac21dda6e4135f75a2de29f'
tags:
  - cve.org
ingestedAt: '2026-10-18T16:47:32.501Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

ASoC: codecs: max98363: fix uninitialized stream_config->type

stream_config is not initialized before being passed to
sdw_stream_add_slave().  The type field may contain garbage and is
later copied to stream->type by sdw_config_stream().

Zero-initialize stream_config so type defaults to SDW_STREAM_PCM.

## Affected

- `Linux >= 18c0af945fa35766730d3f729adcf417a3d1ad5d < 1c251426bb67de5cbfd3b5550bd5983736e8b9c7`
- `Linux >= 18c0af945fa35766730d3f729adcf417a3d1ad5d < 7df8c39a50f364c04d68881e61ba1ecad29d4b72`
- `Linux >= 18c0af945fa35766730d3f729adcf417a3d1ad5d < f44ba04c7a32bd13dbdcd814385b8629d0ee95e3`
- `Linux >= 18c0af945fa35766730d3f729adcf417a3d1ad5d < bcd61aa247c28b721ac21dda6e4135f75a2de29f`
- `Linux 6.4`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.