CVE-2026-98263
Published Oct 6, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type stream_config is not initialized before being passed to sdw_stream_add_slave(). The type field may contain garbage and is later copied to stream->type by sdw_config_stream(). Zero-initialize stream_config so type defaults to SDW_STREAM_PCM. While at it, use snd_sdw_params_to_config() helper instead of open-coding the same logic.
Is your site exposed to CVE-2026-98263?
Run a free security scan — no signup, results in seconds.
EPSS — Exploit Prediction
0.0018
Probability of exploitation
0.06%
Percentile rank
EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.
References
Other References
https://git.kernel.org/stable/c/03a5699a0a04309c597683967aaaf25d1e555ea2
https://git.kernel.org/stable/c/6507055733a9d397289277408b52daf422f8a814
https://git.kernel.org/stable/c/a318ee718e7448cd6bf62d9b3197b6a6a8d4701e
https://git.kernel.org/stable/c/c144447c207e2be24d6ac86d544691ba464caad8
https://git.kernel.org/stable/c/d93988c9e58d37b677f6ee8aceae741c8d1e30ad
Frequently Asked Questions
What is CVE-2026-98263? +
In the Linux kernel, the following vulnerability has been resolved:
ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type
stream_config is not initialized before being passed to
sdw_stream_add_slave(). The type field may contain garbage and is
later copied to stream->type by sdw_config_stream().
Zero-initialize stream_config so type defaults to SDW_STREAM_PCM.
While at it, use snd_sdw_params_to_config() helper instead of
open-coding the same logic.
How do I check if I'm vulnerable to CVE-2026-98263? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.