CVE-2015-2922

Severity: low (CVSS 3.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2015-05-27 · updated 2026-06-17
Weakness: CWE-17

Description

The ndisc_router_discovery function in net/ipv6/ndisc.c in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack in the Linux kernel before 3.19.6 allows remote attackers to reconfigure a hop-limit setting via a small hop_limit value in a Router Advertisement (RA) message.

Affected products

Debian Linux: 7.0, 8.0
Fedoraproject Fedora: 20, 21, 22
Linux kernel: through 3.19.5
Oracle Corporation Oracle Linux: 5.0
Oracle Corporation Solaris Operating System: 11.3
RedHat Enterprise Mrg: 2.5

References

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6fd99094de2b83d1d4c8457f2c83483b2828e75a
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155804.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155854.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155908.html
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00023.html
http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html
http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html
http://rhn.redhat.com/errata/RHSA-2015-1221.html
http://rhn.redhat.com/errata/RHSA-2015-1534.html
http://rhn.redhat.com/errata/RHSA-2015-1564.html
http://www.debian.org/security/2015/dsa-3237
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.6

Get alerted when CVE-2015-2922 or the next vulnerability affects your stack