In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: max98363: fix uninitialized stream_config->type stream_config is… (CVE-2026-98744)

The Linux kernel's ASoC max98363 codec driver had a vulnerability where the stream_config structure was not initialized before being passed to the function sdw_stream_add_slave(). Specifically, the type field within stream_config could contain garbage values, which were then copied to stream->type by sdw_config_stream(). The fix involved zero-initializing stream_config so that the type field defaults to SDW_STREAM_PCM, ensuring predictable and safe behavior.

Uninitialized memory usage in stream_config->type could lead to unpredictable behavior in the sound wire stream configuration. The exact impact is not detailed, and no known exploits are reported. The issue could potentially cause incorrect stream type handling within the kernel audio subsystem.

A fix has been implemented in the Linux kernel to zero-initialize the stream_config structure, ensuring the type field defaults to SDW_STREAM_PCM. Users should apply the official kernel update or patch that includes this fix to remediate the vulnerability.