BBleepingComputerinVulnerability·critical
CISA Issues Emergency Directive on Actively Exploited Linux Kernel Vulnerabilities
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three Linux kernel vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, citing active exploitation in the wild. One of the flaws is rated critical and may allow privilege escalation or remote code execution. The agency has issued an emergency directive requiring federal civilian executive branch agencies to patch affected systems within a defined timeframe. The vulnerabilities affect the Linux kernel across multiple distributions, with patches expected from maintainers.
—1m
