🔴 Critical: CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild
-
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three Linux kernel flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild.
One of the flagged issues is CVE-2025-39682, which carries a CVSS score of 9.8. It is described as an improper check for unusual or exceptional conditions in the TLS receive path.
The article does not provide further technical details or additional identifiers for the remaining vulnerabilities.
- Review the CISA KEV catalog entry for the affected Linux kernel flaws
- Confirm whether your systems run a vulnerable kernel version
- Apply available kernel updates and mitigations as advised by your distribution vendor
- Monitor for signs of exploitation tied to the TLS receive path flaw
Source: The Hacker News
Are any of your organization's Linux systems affected by these actively exploited kernel flaws, and how are you handling remediation?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login