CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild
Summary: CISA added three Linux kernel flaws to its Known Exploited Vulnerabilities catalog on Friday, citing evidence of active exploitation, though no details were given on how they are being exploited or whether they form a single attack chain. Red Hat updated its advisories for all three on September 19, 2026, at 2 a.m. UTC to acknowledge active exploitation, and under Binding Operational Directive 26-04 federal civilian agencies are recommended to apply fixes by September 21, 2026.
What you should know: Red Hat calls these high risk with known public exploits and urges high-priority remediation, and federal agencies have a two-day window from the advisory update to patch - a timeline that leaves little room for the testing cycles most Linux fleets require.
Read the original at The Hacker News ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2026-68121CVE-2026-74469CVE-2026-80844CVE-2026-81000
- Related
- ⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, Click Fix Attacks, Click Fix Surge, and Browser Hijacks Cyber Risks ·ZDI-26-834: Linux Kernel IPv6 AH Routing Header Integer Underflow Local Privilege Escalation Vulnerability Cyber Risks · Oct 29, 2026Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026