CISA warns of active attacks exploiting Android, Linux bugs

📅 3 June 2026 at 15:36 UTC📰 Bleeping ComputerView original source ↗

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that hackers are exploiting vulnerabilities in the Linux kernel and Android operating system. [...]

🤖 AI BriefingAuto-generated threat analysis

🔍Threat Overview

Hackers are exploiting vulnerabilities in the Linux kernel and Android operating system, with CISA warning that these flaws can be leveraged for increased privileges and potentially escape from a container to gain root-level access on the host system.

⚙️Technical Details

💥Impact Assessment

Severity: Critical

🛡️Recommended Actions

1Apply vendor-provided security updates and mitigations

2Stop using impacted software until the deadline is met

3Validate network controls, detection rules, and cloud configs to prevent exploitation

📦Affected Products

Google AndroidCanonical Ubuntu LinuxDebian Debian LinuxFedoraproject FedoraLinux Linux KernelNetapp Bootstrap OsNetapp H300SNetapp H300S FirmwareNetapp H410CNetapp H410C Firmware

🔐NVD Verified DataVERIFIED

CVE-2025-48595 ↗CVSS 8.4 — HIGH

Attack Vector

LOCAL

Complexity

LOW

Vector String

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-190

Affected Products (CPE)

Google Android