CISA Adds One Known Exploited Vulnerability to Catalog

CISA added CVE-2025-39682 — a Linux Kernel "Improper Check for Unusual or Exceptional Conditions" vulnerability — to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation. The advisory reminds Federal Civilian Executive Branch agencies to follow BOD 26-04 by prioritizing rapid remediation of KEV-listed flaws (particularly on publicly exposed assets that could grant total control post-exploitation) and invites submissions of other exploited vulnerabilities for KEV consideration.