Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

CISA adds Linux kernel flaws to KEV catalog under BOD 26-04

Public Sector Action
First reported
Last updated
Happening score
H score 36
1 unique sources, 1 articles

Summary

Hide ▲

CISA added three Linux kernel flaws to its KEV catalog after evidence of active exploitation, forcing federal remediation prioritization. Under BOD 26-04, FCEB agencies are recommended to apply fixes by September 21, 2026. Red Hat updated its advisories on September 19, 2026, and the flaws can enable memory disclosure, denial-of-service, and local privilege escalation.

Related Happenings

Linux kernel security patch release for CVE-2026-64507

Security Patch Release
H score24 First: 29.09.2026 20:00 Last: 29.09.2026 20:00 Sources 1

About this happening: Mitigations for Branch Target Reuse (BTR) have been released and merged into the Linux kernel, delivering fixes for CVE-2026-64507 and CVE-2026-64508. The update a...

Open Happening

FedRAMP mandates VDR and VER rules for cloud service offerings

Public Sector Action
H score24 First: 24.09.2026 17:02 Last: 24.09.2026 17:02 Sources 1

About this happening: FedRAMP issued mandatory VDR and VER rules for FedRAMP Certification, forcing cloud service offerings to meet new detection, remediation, and evidence requirements on...

Open Happening

Linux kernel actively exploited flaws (multiple vulnerabilities)

Vulnerability
H score46 First: 19.09.2026 09:24 Last: 19.09.2026 09:24 Sources 1

How related: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added three security flaws impacting the Linux kernel to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.

About this happening: Three Linux kernel vulnerabilities—CVE-2025-39682, CVE-2026-53266, and CVE-2025-39964—were added to CISA KEV after evidence of active exploitation. The fla...

Open Happening

Red Hat Linux kernel advisory update for active exploitation

Advisory/Mitigation
H score53 First: 19.09.2026 09:24 Last: 19.09.2026 09:24 Sources 1

How related: This CVE is high risk and there are known public exploits leveraging this vulnerability," Red Hat said. "Address this vulnerability with high priority.

About this happening: Red Hat updated its Linux kernel advisories on September 19, 2026 to flag active exploitation of CVE-2025-39682, CVE-2026-53266, and CVE-2025-39964, pu...

Open Happening

Linux kernel upstream security patch release for CVE-2026-53264

Security Patch Release
H score32 First: 28.07.2026 11:04 Last: 28.07.2026 11:04 Sources 1

About this happening: Linux kernel maintainers have backported CVE-2026-53264 fixes across stable branches, closing a local privilege-escalation path that can turn a local user into root on...

Open Happening

Timeline

  1. 19.09.2026 09:24 2 articles · 13d ago

    CISA adds three Linux kernel vulnerabilities to KEV catalog

    Industry Or Public Sector Update

    CISA added CVE-2025-39682, CVE-2026-53266, and CVE-2025-39964 to the Known Exploited Vulnerabilities catalog after evidence of active exploitation against the Linux kernel.

    Show sources
    Open in new tab
  2. 19.09.2026 09:24 1 articles · 13d ago

    Red Hat updates advisories and federal agencies face a September 21 patch deadline

    Legal Policy Action Update

    Red Hat updated the advisories for the Linux kernel flaws at 2 a.m. UTC on September 19, 2026, acknowledged active exploitation, and under Binding Operational Directive 26-04 Federal Civilian Executive Branch agencies are recommended to apply the necessary fixes by September 21, 2026.

    Show sources
    Open in new tab