Fragnesia Linux kernel flaw chained with PHP2Shell in attacks
Event Brief generated 36 s read
Written by an AI. It was merged from the source on this page and has not been reviewed by a person.
The short version
- CISA warned federal agencies to patch the Fragnesia Linux kernel flaw.
- Attackers chain the kernel bug with the PHP2Shell flaws in the wild.
- Servers that run PHP and the vulnerable kernel face the combined risk.
What happened
CISA warned federal agencies to patch a high-severity Linux kernel privilege escalation bug called Fragnesia. According to BleepingComputer, attackers are chaining it with the PHP2Shell flaws in real attacks. The feed summary does not give affected kernel versions or the CVE identifier.
Why it might matter
A privilege escalation bug turns a limited foothold into full control of a host. Pairing it with PHP2Shell may make a web-server compromise more damaging for operators who have not patched both.
What we don’t know yet
The summary does not state affected kernel versions, fixed versions, or the number of compromised systems. It does not describe how the two flaws are chained step by step.
