Live › vulnerability › CVE-2026-98743
Go to dashboardThe Linux kernel's RT1017 SDCA SoundWire audio codec driver passed an uninitialized stream configuration structure, so its stream type field could hold garbage. The fix zero-initializes the structure so the type defaults to PCM; the sources do not describe an attacker-triggered impact.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running a Linux kernel with the rt1017-sdca-sdw audio codec driver, typically hardware using that Realtek SoundWire amplifier. Systems without that hardware or driver are unlikely to be affected. The sources do not say what an attacker could do.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type
stream_config is not initialized before being passed to sdw_stream_add_slave(). The type field may contain garbage and is later copied to stream->type by sdw_config_stream().
Zero-initialize stream_config so type defaults to SDW_STREAM_PCM.
While at it, use snd_sdw_params_to_config() helper instead of open-coding the same logic.
This page as .md · .json · in your agent: get_signal("CVE-2026-98743")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.