CISA adds Linux kernel flaws to exploited vulnerabilities catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three critical Linux kernel vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, requiring federal agencies to remediate them by September 21, 2026. These vulnerabilities have high CVSS scores and could lead to sensitive memory exposure, system crashes, or privilege escalation.

This Wire brief sits within Fusion42's coverage of Cybersecurity, and 2 sources have reported it between 19 Sep 2026 and 21 Sep 2026.