EP. 166: Three Linux Kernel Vulnerabilities Added to CISA’s Exploited List

The Digital Warfare Podcast · Sep 21, 2026 · 5m · transcript

Summary

Fresh reporting on September 21 warns organizations about three Linux kernel vulnerabilities associated with active exploitation: CVE-2025-39682, CVE-2026-53266 and CVE-2025-39964. The vulnerabilities affect different kernel subsystems and have different prerequisites and consequences.

CVE-2025-39682 concerns Linux kernel TLS receive processing and the handling of zero length records. Ubuntu's technical description confirms the flaw involves the interaction between zero length records, recvmsg() processing and zero copy decryption.

CVE-2026-53266 affects the bridge ebtables SNAT path…