In the Linux kernel, the following vulnerability has been resolved:

ASoC: codecs: max98363: fix uninitialized stream_config->type

stream_config is not initialized before being passed to
sdw_stream_add_slave(). The type field may contain garbage and is
later copied to stream->type by sdw_config_stream().

Zero-initialize stream_config so type defaults to SDW_STREAM_PCM.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
18c0af945fa35766730d3f729adcf417a3d1ad5d affected < 1c251426bb67de5cbfd3b5550bd5983736e8b9c7
18c0af945fa35766730d3f729adcf417a3d1ad5d affected < 7df8c39a50f364c04d68881e61ba1ecad29d4b72
18c0af945fa35766730d3f729adcf417a3d1ad5d affected < f44ba04c7a32bd13dbdcd814385b8629d0ee95e3
18c0af945fa35766730d3f729adcf417a3d1ad5d affected < bcd61aa247c28b721ac21dda6e4135f75a2de29f
Linux Linux affected
Version Status Constraints
6.4 affected —
0 unaffected < 6.4
6.12.113 unaffected ≤ 6.12.*
6.18.56 unaffected ≤ 6.18.*
7.2.10 unaffected ≤ 7.2.*
7.3-rc6 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/1c251426bb67de5cbfd3b5550bd5983736e8b9c7 cve-icon cve-icon
https://git.kernel.org/stable/c/7df8c39a50f364c04d68881e61ba1ecad29d4b72 cve-icon cve-icon
https://git.kernel.org/stable/c/bcd61aa247c28b721ac21dda6e4135f75a2de29f cve-icon cve-icon
https://git.kernel.org/stable/c/f44ba04c7a32bd13dbdcd814385b8629d0ee95e3 cve-icon cve-icon
History

Sun, 18 Oct 2026 22:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-788

Sun, 18 Oct 2026 16:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: max98363: fix uninitialized stream_config->type stream_config is not initialized before being passed to sdw_stream_add_slave(). The type field may contain garbage and is later copied to stream->type by sdw_config_stream(). Zero-initialize stream_config so type defaults to SDW_STREAM_PCM.
Title ASoC: codecs: max98363: fix uninitialized stream_config->type
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-10-18T15:47:29.706Z

Reserved: 2026-09-25T10:25:14.367Z

Link: CVE-2026-98744

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-18T16:17:28.140

Modified: 2026-10-18T16:17:28.140

Link: CVE-2026-98744

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-18T22:15:14Z

Weaknesses