CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild

CISA added three high-severity Linux kernel vulnerabilities (CVE-2025-39682, CVE-2026-53266, CVE-2025-39964) to its Known Exploited Vulnerabilities catalog citing active exploitation; CVSS scores range from 7.8 to 9.8, Red Hat updated advisories acknowledging active exploitation, and federal agencies are urged to apply fixes by September 21, 2026. The report also notes a separate disclosure of four local privilege escalation kernel flaws by researcher Asim Manizada.