CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added three security flaws impacting the Linux kernel to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities are listed below - CVE-2025-39682 (CVSS score: 9.8) - An improper check for unusual or exceptional conditions vulnerability in the TLS receive path

Report facts: CISA has added three actively exploited Linux kernel vulnerabilities, including CVE-2025-39682 (CVSS 9.8) in the TLS receive path, to its Known Exploited Vulnerabilities catalog, signaling confirmed in-the-wild exploitation of widely used infrastructure components. RealGround analysis: Because many AI systems and agents run on Linux infrastructure, these kernel flaws represent an AI supply chain risk—compromise of the host OS can bypass application-level AI security controls and expose models, data, and agent logic. Organizations should ensure their AI workloads are included in OS patching and KEV-based remediation workflows and maintain accurate SBOMs and asset inventories to quickly identify and mitigate impacted AI infrastructure.