{"id":"CVE-2026-98743","kind":"vulnerability","aliases":["CVE-2026-98743"],"related":[],"title":"Linux kernel: uninitialized SoundWire stream type in RT1017 audio driver","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type\n\nstream_config is not initialized before being passed to\nsdw_stream_add_slave().  The type field may contain garbage and is\nlater copied to stream->type by sdw_config_stream().\n\nZero-initialize stream_config so type defaults to SDW_STREAM_PCM.\n\nWhile at it, use snd_sdw_params_to_config() helper instead of\nopen-coding the same logic.","summary":"The Linux kernel's RT1017 SDCA SoundWire audio codec driver passed an uninitialized stream configuration structure, so its stream type field could hold garbage. The fix zero-initializes the structure so the type defaults to PCM; the sources do not describe an attacker-triggered impact.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["audio","infrastructure","linux-kernel","soundwire"],"not_affected_if":["no-rt1017-hardware"],"how_to_check":"- unknown","fix":"- Update to a Linux kernel release that includes the ASoC rt1017-sdca-sdw fix (the sources do not name the version).","status":"open","published_at":"2026-10-18T16:17:28+00:00","first_seen_at":"2026-10-23T21:57:16+00:00","triaged_at":"2026-10-25T05:17:01+00:00","updated_at":"2026-10-25T05:17:01+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-10-25T05:17:01Z","model":"claude-haiku-5-5","output":{"fix":"- Update to a Linux kernel release that includes the ASoC rt1017-sdca-sdw fix (the sources do not name the version).","reach":"local","title":"Linux kernel: uninitialized SoundWire stream type in RT1017 audio driver","impact":"low","summary":"The Linux kernel's RT1017 SDCA SoundWire audio codec driver passed an uninitialized stream configuration structure, so its stream type field could hold garbage. The fix zero-initializes the structure so the type defaults to PCM; the sources do not describe an attacker-triggered impact.","category":"infrastructure","nicknames":[],"who_cares":["linux-kernel","audio","soundwire"],"confidence":0.4,"needs_auth":"unknown","worst_case":"unknown","analyst_note":"Check the NVD entry and the upstream kernel commit to confirm the real impact and the first fixed kernel version.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":["no-rt1017-hardware"],"who_is_affected":"Systems running a Linux kernel with the rt1017-sdca-sdw audio codec driver, typically hardware using that Realtek SoundWire amplifier. Systems without that hardware or driver are unlikely to be affected. The sources do not say what an attacker could do.","user_interaction":"unknown","needs_special_setup":"yes","severity_if_unknown":"unknown"},"cost_usd":0.000588,"input_tokens":3406,"output_tokens":494,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-98743':13A,16A 'add':102C 'asoc':80C 'attack':67B 'attacker-trigg':66B 'audio':9A,17B,30B 'code':147C 'codec':31B,81C 'config':89C,92C,119C,125C,141C 'configur':37B 'contain':108C 'copi':113C 'could':44B 'cve':11A,14A 'default':57B,128C 'describ':64B 'driver':10A,32B 'field':43B,106C 'fix':48B,86C 'follow':75C 'garbag':46B,109C 'helper':142C 'hold':45B 'impact':69B 'infrastructur':18B 'initi':51B,95C,123C 'instead':143C 'kernel':2A,21B,25B,73C 'later':112C 'linux':1A,20B,24B,72C 'linux-kernel':19B 'logic':150C 'may':107C 'open':146C 'open-cod':145C 'param':139C 'pass':33B,98C 'pcm':59B,132C 'resolv':79C 'rt1017':8A,27B,83C 'rt1017-sdca-sdw':82C 'sdca':28B,84C 'sdw':85C,100C,118C,130C,138C 'slave':103C 'snd':137C 'soundwir':4A,22B,29B 'sourc':61B 'stream':5A,36B,41B,88C,91C,101C,115C,120C,124C,131C 'structur':38B,53B 'trigger':68B 'type':6A,42B,56B,90C,105C,116C,127C 'uniniti':3A,35B,87C 'use':136C 'vulner':76C 'zero':50B,122C 'zero-initi':49B,121C","nicknames":[],"mitigations":[],"who_affected":"Systems running a Linux kernel with the rt1017-sdca-sdw audio codec driver, typically hardware using that Realtek SoundWire amplifier. Systems without that hardware or driver are unlikely to be affected. The sources do not say what an attacker could do.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-18T16:17:28+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-98743","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98743","severity":null,"published_at":"2026-10-18T16:17:28+00:00","modified_at":"2026-10-21T13:21:41+00:00","first_seen_at":"2026-10-23T21:57:16+00:00","fetched_at":"2026-10-23T22:28:56+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}