CISA alerts of active exploitation of three Linux kernel flaws

CISA has added CVE-2025-39964, CVE-2026-53266, and CVE-2025-39682 in the Linux Kernel to its Known Exploited Vulnerabilities catalog after confirming their use in attacks. The flaws involve AF_ALG cryptographic sockets, ebtables SNAT, and the kTLS receive path, with potential consequences including memory corruption, system crashes, altered cryptographic behavior, and privilege escalation. Federal agencies must apply available mitigations and updates and perform forensic triage on affected assets.