CISA adds Linux kernel zero-day CVE-2026-43456 to KEV after active exploitation

Summary

In case of CVE-2026-43456, CISA has added it to the Known Exploited Vulnerabilities (KEV) catalog after confirmed in-the-wild exploitation, meaning affected systems should be patched as soon as vendor updates are available. It's a issue in the Linux kernel bonding driver. Fascinating part is the number of chained exploits needed to achieve this.