---
id: "CVE-2026-98743"
kind: "vulnerability"
aliases: ["CVE-2026-98743"]
title: "Linux kernel: uninitialized SoundWire stream type in RT1017 audio driver"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["audio", "infrastructure", "linux-kernel", "soundwire"]
not_affected_if: ["no-rt1017-hardware"]
published_at: "2026-10-18T16:17:28+00:00"
first_seen_at: "2026-10-23T21:57:16+00:00"
updated_at: "2026-10-25T05:17:01+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-98743", "first_seen_at": "2026-10-23T21:57:16+00:00"}]
---

# Linux kernel: uninitialized SoundWire stream type in RT1017 audio driver

The Linux kernel's RT1017 SDCA SoundWire audio codec driver passed an uninitialized stream configuration structure, so its stream type field could hold garbage. The fix zero-initializes the structure so the type defaults to PCM; the sources do not describe an attacker-triggered impact.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- unknown

## Fix

- Update to a Linux kernel release that includes the ASoC rt1017-sdca-sdw fix (the sources do not name the version).

## Timeline

- 2026-10-23T21:57:16+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-98743

## From the sources

In the Linux kernel, the following vulnerability has been resolved:

ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type

stream_config is not initialized before being passed to
sdw_stream_add_slave().  The type field may contain garbage and is
later copied to stream->type by sdw_config_stream().

Zero-initialize stream_config so type defaults to SDW_STREAM_PCM.

While at it, use snd_sdw_params_to_config() helper instead of
open-coding the same logic.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_