CVE-2026-98743

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-98743", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.367Z", "datePublished": "2026-10-18T15:47:28.831Z", "dateUpdated": "2026-10-21T12:56:18.942Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-21T12:56:18.942Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type\n\nstream_config is not initialized before being passed to\nsdw_stream_add_slave(). The type field may contain garbage and is\nlater copied to stream->type by sdw_config_stream().\n\nZero-initialize stream_config so type defaults to SDW_STREAM_PCM.\n\nWhile at it, use snd_sdw_params_to_config() helper instead of\nopen-coding the same logic."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["sound/soc/codecs/rt1017-sdca-sdw.c"], "versions": [{"version": "2b7aecd58528551e6e3da58091ff7ceb4718e6be", "lessThan": "30a60e74ee71de027bf1387ac20d73e863bbf77b", "status": "affected", "versionType": "git"}, {"version": "2b7aecd58528551e6e3da58091ff7ceb4718e6be", "lessThan": "4e337c24c0a97fcdb394f954208971de5d372066", "status": "affected", "versionType": "git"}, {"version": "2b7aecd58528551e6e3da58091ff7ceb4718e6be", "lessThan": "d195c8c763fdd0a7f74a34973f8946215a708f1e", "status": "affected", "versionType": "git"}, {"version": "2b7aecd58528551e6e3da58091ff7ceb4718e6be", "lessThan": "7791ebf56eb4ab6b7a20252757a3029bc8068715", "status": "affected", "versionType": "git"}, {"version": "2b7aecd58528551e6e3da58091ff7ceb4718e6be", "lessThan": "174d160884199cad97413f33fe1b56027dc0d3e1", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["sound/soc/codecs/rt1017-sdca-sdw.c"], "versions": [{"version": "6.6", "status": "affected"}, {"version": "0", "lessThan": "6.6", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.160", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.113", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.56", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.10", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6", "versionEndExcluding": "6.6.160"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6", "versionEndExcluding": "6.12.113"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6", "versionEndExcluding": "6.18.56"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6", "versionEndExcluding": "7.2.10"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/30a60e74ee71de027bf1387ac20d73e863bbf77b"}, {"url": "https://git.kernel.org/stable/c/4e337c24c0a97fcdb394f954208971de5d372066"}, {"url": "https://git.kernel.org/stable/c/d195c8c763fdd0a7f74a34973f8946215a708f1e"}, {"url": "https://git.kernel.org/stable/c/7791ebf56eb4ab6b7a20252757a3029bc8068715"}, {"url": "https://git.kernel.org/stable/c/174d160884199cad97413f33fe1b56027dc0d3e1"}], "title": "ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["sound/soc/codecs/rt1017-sdca-sdw.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "30a60e74ee71de027bf1387ac20d73e863bbf77b", "status": "affected", "version": "2b7aecd58528551e6e3da58091ff7ceb4718e6be", "versionType": "git"}, {"lessThan": "4e337c24c0a97fcdb394f954208971de5d372066", "status": "affected", "version": "2b7aecd58528551e6e3da58091ff7ceb4718e6be", "versionType": "git"}, {"lessThan": "d195c8c763fdd0a7f74a34973f8946215a708f1e", "status": "affected", "version": "2b7aecd58528551e6e3da58091ff7ceb4718e6be", "versionType": "git"}, {"lessThan": "7791ebf56eb4ab6b7a20252757a3029bc8068715", "status": "affected", "version": "2b7aecd58528551e6e3da58091ff7ceb4718e6be", "versionType": "git"}, {"lessThan": "174d160884199cad97413f33fe1b56027dc0d3e1", "status": "affected", "version": "2b7aecd58528551e6e3da58091ff7ceb4718e6be", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["sound/soc/codecs/rt1017-sdca-sdw.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.6"}, {"lessThan": "6.6", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.160", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.113", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.56", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.10", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type\n\nstream_config is not initialized before being passed to\nsdw_stream_add_slave(). The type field may contain garbage and is\nlater copied to stream->type by sdw_config_stream().\n\nZero-initialize stream_config so type defaults to SDW_STREAM_PCM.\n\nWhile at it, use snd_sdw_params_to_config() helper instead of\nopen-coding the same logic."}], "id": "CVE-2026-98743", "lastModified": "2026-10-21T13:21:41.923", "metrics": {}, "published": "2026-10-18T16:17:28.037", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/174d160884199cad97413f33fe1b56027dc0d3e1"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/30a60e74ee71de027bf1387ac20d73e863bbf77b"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/4e337c24c0a97fcdb394f954208971de5d372066"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/7791ebf56eb4ab6b7a20252757a3029bc8068715"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/d195c8c763fdd0a7f74a34973f8946215a708f1e"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type", "id": "2555125", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2555125"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-908", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type\nstream_config is not initialized before being passed to\nsdw_stream_add_slave(). The type field may contain garbage and is\nlater copied to stream->type by sdw_config_stream().\nZero-initialize stream_config so type defaults to SDW_STREAM_PCM.\nWhile at it, use snd_sdw_params_to_config() helper instead of\nopen-coding the same logic.", "A flaw was found in the Linux kernel's rt1017 SDCA audio codec driver. The driver fails to initialize stream configuration data before passing it to the sound subsystem, leaving configuration fields populated with uninitialized memory. A local user could exploit this flaw during audio stream configuration, potentially resulting in system instability or a Denial of Service (DoS)."], "name": "CVE-2026-98743", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-10-18T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-98743\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-98743\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98743.mbox"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[2b7aecd58528551e6e3da58091ff7ceb4718e6be,4e337c24c0a97fcdb394f954208971de5d372066)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[2b7aecd58528551e6e3da58091ff7ceb4718e6be,d195c8c763fdd0a7f74a34973f8946215a708f1e)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[2b7aecd58528551e6e3da58091ff7ceb4718e6be,7791ebf56eb4ab6b7a20252757a3029bc8068715)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[2b7aecd58528551e6e3da58091ff7ceb4718e6be,174d160884199cad97413f33fe1b56027dc0d3e1)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "6.6"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.6)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.113,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.56,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.10,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-10-18T20:15:14.857854+00:00", "updated": "2026-10-23T13:45:17.449073+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"], "weaknesses": ["CWE-457", "CWE-908"]}