CISA adds Linux kernel and Android Framework flaws to Known Exploited Vulnerabilities catalog
A four-year-old Linux kernel flaw is being actively exploited: CISA added CVE-2022-0492 and CVE-2025-48595, an Android Framework integer overflow, to its Known Exploited Vulnerabilities catalog on June 2. CISA advises all organizations to prioritize remediation. Source: cisa.gov/
Organizations running Linux systems and Android fleets have new patching priorities. CISA added two vulnerabilities to its Known Exploited Vulnerabilities catalog on June 2, as published on cisa.gov. The first is CVE-2022-0492, a Linux kernel improper authentication vulnerability first disclosed in 2022. The second is CVE-2025-48595, an integer overflow in the Android Framework. Both entries were added based on evidence of active exploitation. One day later, CISA added CVE-2026-45247, a vulnerability in the Mirasvit Cache Warmer extension used by Magento online shops, after reports of active exploitation. Entries in the KEV catalog carry binding remediation deadlines for US federal civilian agencies. CISA advises all organizations to treat the catalog as a patching priority list. Source: cisa.gov/kev.