CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild

The US Cybersecurity and Infrastructure Security Agency added three Linux kernel vulnerabilities to its Known Exploited Vulnerabilities catalog due to active exploitation. One, CVE-2025-39682, has a CVSS score of 9.8 and is linked to a condition check error in the TLS receive path.

• CISA added three Linux kernel vulnerabilities to KEV catalog
• CVE-2025-39682 has a CVSS score of 9.8
• Vulnerability linked to condition check in TLS receive path
• Evidence of active exploitation