The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three Linux kernel vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, according to a report from The Hacker News. The agency cited evidence of active exploitation for each flaw, including CVE-2025-39682 and two others not named in the report.
Being placed on the KEV list is a strong indicator that attackers are already using these flaws in real-world campaigns. For federal civilian agencies, the listing creates a binding remediation deadline, but the practical effect extends to any organization running affected Linux kernels.
The report does not provide technical details or patches for the three flaws, so administrators should treat the announcement as a trigger to review their kernel versions and apply any available vendor updates. The single source offers no contrasting viewpoints, so the key takeaway is the urgent need for patching based on CISA's explicit exploitation warning.