CISA orders federal patching of Linux kernel flaw exploited alongside PHP2Shell
- Status
- Corroborated, not yet confirmed by the vendor
- Kind
- Vulnerability
- Vendor
- Linux kernel project
- Product
- Linux kernel
- First seen
Summary
According to BleepingComputer, CISA has ordered US federal agencies to patch a high-severity Linux kernel privilege escalation bug. The item says attackers are chaining this bug with PHP2Shell flaws in the wild.
If you use Linux kernel project
Identify Linux systems and confirm the running kernel version.
Apply the kernel patch or vendor update for the privilege escalation flaw as soon as it is available.
Patch or mitigate the PHP2Shell flaws on any PHP-hosting systems.
Review logs for signs of unexpected privilege escalation or PHP-based shell activity.
Timeline
- Made public by BleepingComputer on Bluesky2 days
- First seen by cve.now
What the sources say 2
· BleepingComputer on Bluesky: “CISA ordered US federal agencies to patch a high-severity Linux kernel privilege escalation bug that attackers are chaining with the PHP2Shell flaws in the wild.” Source
· Mastodon: “A newly disclosed vulnerability in the Linux kernel’s IPv4 networking subsystem exposes systems to a potentially serious remote attack.” Source