CVE-2015-2922: Low severity linux kernel vulnerability
Last updated 24 July 2024
Other sources
Linux kernel built with the IPv6 networking support(CONFIGIPV6) is vulnerable to setting its 'hoplimit' too low, via the neighbour discovery protocol. It could result in thwarting the IPv6 functionality.
An unprivileged user on a local network could use this flaw to cause DoS to a remote system.
Upstream fix: ------------- -> https://git.kernel.org/linus/6fd99094de2b83d1d4c8457f2c83483b2828e75a
Reference: ---------- -> http://www.openwall.com/lists/oss-security/2015/04/04/2
— Red Hat
The ndiscrouterdiscovery function in net/ipv6/ndisc.c in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack in the Linux kernel before 3.19.6 allows remote attackers to reconfigure a hop-limit setting via a small hoplimit value in a Router Advertisement (RA) message.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-2922?
CVE-2015-2922 is considered a moderate severity vulnerability due to its potential impact on IPv6 networking functionality.
How do I fix CVE-2015-2922?
To fix CVE-2015-2922, upgrade to a patched version of the Linux kernel that is 5.10.223-1 or newer.
Which versions of Linux are affected by CVE-2015-2922?
CVE-2015-2922 affects Linux kernel versions up to and including 3.19.5, as well as specific versions of Fedora, Oracle Linux, and Debian.
Can unprivileged users exploit CVE-2015-2922 on a local network?
Yes, unprivileged users on a local network can exploit CVE-2015-2922 to manipulate the IPv6 'hop_limit' setting.
What are the potential impacts of CVE-2015-2922?
The potential impacts of CVE-2015-2922 include disrupting IPv6 functionality and network communication.