CISA BOD 26-04 Timelines for Three Linux Kernel CVEs

CISA added three actively exploited Linux kernel vulnerabilities (CVE-2025-39682, CVE-2026-53266, CVE-2025-39964) to its KEV catalog, triggering 3-day/14-day remediation deadlines under BOD 26-04; Red Hat confirms active exploitation and public exploits, and organizations are urged to prioritize immediate kernel patching and reboots with support from Qualys TruRisk Eliminate for detection and high-reliability patches.