CISA warns federal agencies to patch Fragnesia Linux kernel flaw chained in PHP2Shell attacks

Summary

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies to patch a high-severity Linux kernel privilege escalation bug that attackers are chaining with the PHP2Shell flaws in the wild, according to BleepingComputer. The report is based on an article excerpt, so the full details of affected systems and the exploit chain are not covered here.

Timeline

1. BleepingComputer

   29 Oct 2026, 13:59 UTCSource ↗

   BleepingComputer reports that CISA warned federal agencies to patch a high-severity Linux kernel privilege escalation bug, Fragnesia, that attackers are chaining with the PHP2Shell flaws in the wild.