CISA Issues Urgent Warning on Fragnesia Linux Kernel Flaw Chained in PHP2Shell Attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning regarding a high-severity Linux kernel privilege escalation vulnerability identified as Fragnesia. According to the advisory, attackers are actively chaining the Fragnesia bug with PHP2Shell flaws in the wild to compromise Linux systems and gain elevated privileges.

CISA directed federal agencies to immediately patch the Linux kernel to address the Fragnesia vulnerability. The advisory notes that the vulnerability is being actively exploited in the wild, though specific technical details of the exploitation chain were not disclosed in the source material. The combination of the kernel privilege escalation with PHP2Shell flaws presents a compounded threat to affected Linux environments.

The warning highlights the severity of the Fragnesia bug, classified as high severity, and its active exploitation alongside PHP2Shell vulnerabilities. No specific CVE identifier was provided in the excerpt, but CISA's directive underscores the need for immediate kernel patching to prevent privilege escalation attacks.