According to Bleeping Computer, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies to patch a high-severity Linux kernel privilege escalation bug that attackers are chaining with the PHP2Shell flaws currently observed in use.
The advisory notes that the kernel issue allows for privilege escalation under certain conditions. CISA reports that threat actors have combined this vulnerability with known PHP2Shell weaknesses to execute code on affected systems. The agency recommends applying available patches promptly across relevant federal environments.
No specific deployment timelines, incident counts, or technical steps beyond patching were provided in the guidance. The warning reflects ongoing detection of active exploitation involving both elements in coordinated attack chains.
