CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks

CISA has issued a warning to federal agencies regarding a high-severity Linux kernel privilege escalation vulnerability known as Fragnesia. Attackers are actively chaining this flaw with PHP2Shell vulnerabilities in the wild. The advisory urges federal agencies to patch the Linux kernel bug promptly. The combination of Fragnesia and PHP2Shell represents a chained attack vector that increases the overall severity and risk. CISA's warning indicates active exploitation of these vulnerabilities in real-world attacks. The chaining of these two flaws could allow attackers to gain elevated privileges on vulnerable Linux systems. Federal agencies are directed to remediate these vulnerabilities as part of CISA's Known Exploited Vulnerabilities catalog guidance.