In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type… (CVE-2026-98743)

The Linux kernel vulnerability CVE-2026-98743 involves the ASoC codec driver rt1017-sdca-sdw where the stream_config structure was not initialized before being passed to sdw_stream_add_slave(). This led to the type field containing uninitialized (garbage) data, which was subsequently copied to stream->type by sdw_config_stream(). The issue was resolved by zero-initializing stream_config to ensure the type field defaults to SDW_STREAM_PCM. Additionally, the code was improved by using the snd_sdw_params_to_config() helper function instead of duplicating logic.

Uninitialized memory usage can lead to unpredictable behavior in the audio subsystem of the Linux kernel, potentially causing system instability or crashes. No direct evidence of exploitation or specific security impact such as privilege escalation or information disclosure is provided.

A fix is available and has been applied to the Linux kernel source code to zero-initialize the stream_config structure. Users should update to the fixed kernel version containing this patch. No additional mitigation steps are indicated.