CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild

CISA has added Linux kernel vulnerabilities CVE-2025-39682, CVE-2026-53266, and CVE-2025-39964 to its Known Exploited Vulnerabilities catalog after evidence of active attacks. The flaws can expose memory, cause denial-of-service conditions, corrupt cryptographic results, or enable local privilege escalation, making timely remediation important; federal agencies have been directed to apply fixes by September 21, 2026.