Linux Kernel KEV Trio: The September 21 Deadline Has Passed

Three Linux kernel vulnerabilities were added to CISA's Known Exploited Vulnerabilities catalog on September 18, 2026 after evidence of active exploitation. U.S. federal civilian agencies had until Se