USN-8604-1: Linux kernel (Azure) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - Drivers...

CVE-2026-12736

creationtimestamp| type| source ---|---|--- 2026-07-24 05:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrel2kbznu2w...

CVE-2026-63313

creationtimestamp| type| source ---|---|--- 2026-07-23 23:01:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrdwycxfmx2a...

CVE-2026-60439

creationtimestamp| type| source ---|---|--- 2026-07-23 00:01:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrbjv36d322d 2026-07-23 00:32:07+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mrbllgkk3q2c 2026-07-23 01:25:26+00:00| seen|...

CVE-2026-15802

creationtimestamp| type| source ---|---|--- 2026-07-22 05:50:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr7mwno5yk2q 2026-07-22 05:59:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr7ngp3y5q2f 2026-07-22 08:48:37+00:00| seen|...

CVE-2026-10678 NULL-pointer / out-of-bounds write in Zephyr MCTP I2C+GPIO target binding driven by an unauthenticated I2C controller

The MCTP-over-I2C+GPIO target binding in Zephyr subsys/pmci/mctp/mctpi2cgpiotarget.c processes pseudo-register writes from an I2C bus master byte-by-byte in mctpi2cgpiotargetwritereceived without validating the order or the receive buffer. In the affected versions the MCTPI2CGPIORXMSGADDR data...

CVE-2026-10678

The CVE-2026-10678 issue affects Zephyr’s MCTP over I2C+GPIO target binding (mctp_i2c_gpio_target.c). It processes I2C bus master writes byte-by-byte without validating the receive buffer, dereferencing b->rx_pkt to write data for data registers (MCTP_I2C_GPIO_RX_MSG_ADDR) before the receive b...

CVE-2026-55084

creationtimestamp| type| source ---|---|--- 2026-07-21 20:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr6lxjruac23 2026-07-21 23:27:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6xjdafl72s...

CVE-2026-64205

A flaw was found in the Linux kernel's i2c-i801 driver. This vulnerability allows a local attacker to trigger a hardware state machine corruption during error handling. This can lead to a denial of service DoS, where the system becomes unresponsive due to a continuous stream of error messages and...

CVE-2026-44508

creationtimestamp| type| source ---|---|--- 2026-07-20 22:02:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr4cb5kair2m 2026-07-20 22:19:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4da67efc27...

EUVD-2026-46013

In the Linux kernel, the following vulnerability has been resolved: i2c: i801: fix hardware state machine corruption in error path A severe livelock and subsequent Hung Task panic were observed in the i2c-i801 driver during concurrent Fuzzing. The crash is caused by an unconditional hardware...

CVE-2026-45799

Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.3.0 and 7.0.0-alpha03, ByteArrayProtoReader32.skipGroup and ProtoReader.skipGroup in wire-runtime do not validate that a LENGTHDELIMITED field length is non-negative before skip, allowing a crafted protobuf...

UBUNTU-CVE-2026-45799

Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.3.0 and 7.0.0-alpha03, ByteArrayProtoReader32.skipGroup and ProtoReader.skipGroup in wire-runtime do not validate that a LENGTHDELIMITED field length is non-negative before skip, allowing a crafted protobuf...

CVE-2026-45799 Wire: skipGroup() missing negative-length check allows 10-byte payload to crash any Wire-decoding service

Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.3.0 and 7.0.0-alpha03, ByteArrayProtoReader32.skipGroup and ProtoReader.skipGroup in wire-runtime do not validate that a LENGTHDELIMITED field length is non-negative before skip, allowing a crafted protobuf...

CVE-2026-45799 Wire: skipGroup() missing negative-length check allows 10-byte payload to crash any Wire-decoding service

Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.3.0 and 7.0.0-alpha03, ByteArrayProtoReader32.skipGroup and ProtoReader.skipGroup in wire-runtime do not validate that a LENGTHDELIMITED field length is non-negative before skip, allowing a crafted protobuf...

CVE-2026-44023

creationtimestamp| type| source ---|---|--- 2026-07-16 22:01:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqsaenrdop2w 2026-07-16 22:46:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqscvvglnh2c...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via CodeMethodWriter in CodeMethodWriter.cs and RubyConventionService in RubyConventionService.cs. An attacker can inject arbitrary Ruby code into generated client classes by supplying an OpenAPI specification...

CVE-2026-60005

creationtimestamp| type| source ---|---|--- 2026-07-15 17:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqp73k3zia2r 2026-07-16 02:05:21+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mqq5jnrowx2a 2026-07-16 13:00:07+00:00| seen|...

CVE-2026-57158 FreeRDP planar_decompress_plane_rle_only: heap OOB read — incomplete fix for CVE-2026-23530

FreeRDP is a free implementation of the Remote Desktop Protocol. From 3.21.0 before 3.28.0, FreeRDP clients using the GFX pipeline contain an incomplete fix for CVE-2026-23530 in planardecompressplanerleonly in libfreerdp/codec/planar.c, allowing a malicious RDP server to send a truncated...

CVE-2026-59803

The CVE-2026-59803 entry concerns rpcx (up to version 1.9.3) with a denial-of-service flaw in protocol.Message.Decode. When a message carries the compression flag, payloads are gzip-decompressed via util.Unzip without a decompressed-size limit; MaxMessageLength is checked only against the compres...