Unscored severity · published May 27, 2015
CVE-2015-2922
The ndisc_router_discovery function in net/ipv6/ndisc.c in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack in the Linux kernel before 3.19.6 allows remote…
–
CVSS
3%
EPSS
No
On KEV
Description
The ndisc_router_discovery function in net/ipv6/ndisc.c in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack in the Linux kernel before 3.19.6 allows remote attackers to reconfigure a hop-limit setting via a small hop_limit value in a Router Advertisement (RA) message.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.0% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
through 3.19.5 · source: NVD
DL
Debian Linux · Debian
7.0; 8.0 · source: NVD
EM
Enterprise Mrg · Redhat
2.5 · source: NVD
FE
Fedora · Fedoraproject
20; 21; 22 · source: NVD
LI
Linux · Oracle
5.0 · source: NVD
SO
Solaris · Oracle
11.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-2922
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-2922
git.kernel.org
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6fd99094de2b83d1d4c8457f2c83483b2828e75a
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155804.html
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155854.html
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155908.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00023.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability