CISA alerts of active exploitation of three Linux kernel flaws

September 21, 2026 · BleepingComputer · Severity: CRITICAL

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that hackers are exploiting three Linux kernel vulnerabilities, one of them rated critical.

Key Takeaways

CISA has issued alerts regarding active exploitation of three Linux kernel flaws, ordering federal agencies to patch these vulnerabilities that may enable privilege escalation on affected systems.
The addition of these Linux kernel CVEs to CISA's Known Exploited Vulnerabilities catalog signals confirmed in-the-wild exploitation and elevates patching priority for all organizations.
Organizations running Linux systems should prioritize kernel updates and monitor for signs of exploitation targeting these newly activated CISA-tracked vulnerabilities.