Exploit for Authorization Bypass Through User-Controlled Key in Apache Camel

camel-salesforce sObjectQuery / apex Header Injection Reproduc...

New Project CAV3RN module abuses Outlook calendar events for C2 and DNS AAAA records for configuration recovery

Introduction In June 2026, as part of our Kaspersky Threat Intelligence Reporting service, we published extensive research on Project CAV3RN, a sophisticated modular framework used for cyberespionage activity against targets in Israel. We have been tracking this cluster since December 2025, and i...

CVE-2026-64146

A flaw was found in the Linux kernel's EROFS Enhanced Read-Only File System component. During the initialization of inode extended attributes xattrs, certain error conditions can lead to a leak of metadata buffers. This memory leak can result in a denial of service DoS due to resource exhaustion...

CVE-2026-64059

A flaw was found in the Linux kernel's network filesystem netfs component. The netfsperformwrite function, responsible for handling write operations, does not correctly manage private data associated with memory pages, known as folios. This improper handling can lead to memory leaks, where system...

CVE-2026-39879

A flaw was found in syslog-ng. An attacker on an adjacent network can exploit a missing sanitization call in the afsqlddrunquery function, leading to a SQL injection vulnerability. This vulnerability, when the SQL driver is manually configured, can result in a denial of service and allow for...

kernel: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss()

A flaw was found in the Linux kernel's RDMA/mana component. A local user could trigger a kernel corruption by providing specific configurations through the user Application Programming Interface uAPI that cause an internal error. This issue arises when Work Queues WQs are specified to share the...

CVE-2026-64064

A flaw was found in the Linux kernel's netfs component. When a streaming write operation is performed, a memory page folio can remain marked as 'dirty' even after the associated data is removed by a file truncation. If this dirty page is subsequently accessed through a memory-mapped file mmap, th...

CVE-2026-64066

A flaw was found in the Linux kernel's netfs component. The netfsreadtopagecache function does not properly pause the generation of new subrequests when a previously issued subrequest has failed. This oversight can lead to continued resource consumption or incorrect system state, potentially...

kernel: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss()

A flaw was found in the Linux kernel's RDMA/mana component. A local user could trigger a kernel corruption by providing specific configurations through the user Application Programming Interface uAPI that cause an internal error. This issue arises when Work Queues WQs are specified to share the...

CVE-2026-64039

A flaw was found in the Linux kernel's display snapshotting component. The system's snapshotting code incorrectly handles memory alignment for display data, leading to a significant memory overallocation. This vulnerability could allow a local attacker to cause a denial of service DoS by consumin...

CVE-2026-64079

A flaw was found in the Linux kernel's netfilter xtables component. A race condition occurs when a network namespace netns table is registered, making it visible with a null operations ops pointer. If a pernet exit operation runs concurrently, it can attempt to unregister the table using this nul...

CVE-2026-64088

A flaw was found in the Linux kernel's batman-adv component. An integer overflow vulnerability exists where the 'ttbufflen' variable, intended to be a positive length, can become a negative value. This occurs when a large value is assigned, causing it to wrap around. This incorrect negative value...

CVE-2026-64093

A flaw was found in the batman-adv component of the Linux kernel. A race condition exists where a timer can be re-armed after its associated reference has been removed during cleanup. This can occur when batadvtpsendercleanup attempts to shut down a timer, but a separate execution context re-arms...

CVE-2026-64036

A flaw was found in the Linux kernel. A local attacker with specific system privileges could exploit a vulnerability in the cgroup/rstat component. By manipulating a function that processes CPU Central Processing Unit statistics, an attacker could cause an out-of-bounds write. This could lead to ...

CVE-2026-64185

A flaw was found in the Linux kernel's sysfs component. When an attempt to update a sysfs group fails, the system can incorrectly remove an already existing sysfs directory. This unintended removal can lead to a denial of service or system instability by silently destroying critical system...

CVE-2026-64081

A flaw was found in the Linux kernel's ARM Firmware Framework for Arm armffa component. This vulnerability arises from insufficient validation of framework notification message layouts. A local attacker, by providing specially crafted firmware data in the shared RX buffer, could trigger an...

CVE-2026-64187

A flaw was found in the Linux kernel's XFS filesystem log recovery component. A local attacker could exploit this vulnerability by crafting a malicious XFS log. When the system attempts to recover from this log, it triggers a null-pointer dereference, which can lead to a system crash. This result...

CVE-2026-63846

A flaw was found in the Linux kernel's drm/amdgpu/jpeg component, specifically within the JPEG v3.0 ring. This component does not support 64-bit user fence writes. Consequently, any command submissions CS that attempt to use 64-bit user fences will be rejected, leading to a functional limitation ...

CVE-2026-63847

A flaw was found in the Linux kernel's AMD GPU JPEG driver. This issue occurs because the JPEG hardware component does not properly handle certain types of graphics commands, specifically 64-bit user fence writes. An attacker could craft and submit malicious commands, causing the system to reject...

CVE-2026-63843

A flaw was found in the Linux kernel's AMD GPU Graphics Processing Unit JPEG Joint Photographic Experts Group component. This vulnerability arises because the JPEG v4.0.5 ring does not correctly support 64-bit user fence writes. A local attacker could exploit this by submitting commands with 64-b...