CVE Tools
Track your stack

CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild

The Hacker NewsBy The Hacker News

Reported exploitedLinux Kernel

Our summary

CISA has added Linux kernel vulnerabilities CVE-2025-39682, CVE-2026-53266, and CVE-2025-39964 to its Known Exploited Vulnerabilities catalog after evidence of active attacks. The flaws can expose memory, cause denial-of-service conditions, corrupt cryptographic results, or enable local privilege escalation, making timely remediation important; federal agencies have been directed to apply fixes by September 21, 2026.

Read at The Hacker News

The Hacker News publishes this story on its own site; we link to it rather than reprint it.

  1. The Hacker News⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser HijacksCVE-2026-68121, CVE-2026-74469 +2
  2. The Hacker NewsPublic Exploits Released for Four Linux Kernel Flaws That Enable Local RootCVE-2026-68121, CVE-2026-74469 +2
  3. Qualys Security BlogCISA BOD 26-04 Timelines for Three Linux Kernel CVEsCVE-2025-39682, CVE-2025-39964 +1
  4. BleepingComputerCISA alerts of active exploitation of three Linux kernel flawsCVE-2025-39682, CVE-2025-39964 +1
  5. SecurityWeekOrganizations Warned of 3 Exploited Linux Kernel VulnerabilitiesCVE-2025-39682, CVE-2025-39964 +1
  6. BleepingComputerMicrosoft September 2026 Patch Tuesday fixes 966 flaws, 2 zero-daysCVE-2026-80844

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store