CISA alerts of active exploitation of three Linux kernel flaws

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert warning of active exploitation of three Linux kernel vulnerabilities. One of the flaws, CVE-2025-39964, has existed for 14 years and was demonstrated to enable privilege escalation and container escape. Public exploits exist for CVE-2025-39682 and CVE-2026-53266, with the latter having a potential privilege escalation path inferred from prior vulnerabilities like Dirty Pipe. Federal agencies are ordered to patch affected systems immediately and conduct forensic triage to detect prior compromise.

AI-extracted · verify before operational use