CVE-2015-2922: Debian Linux

Low severity, CVSS 3.3. EPSS: 3% chance of exploitation in the next 30 days.

The ndisc_router_discovery function in net/ipv6/ndisc.c in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack in the Linux kernel before 3.19.6 allows remote attackers to reconfigure a hop-limit setting via a small hop_limit value in a Router Advertisement (RA) message.

Affected products

• Debian Debian Linux: version 7.0 only; version 8.0 only
• Fedoraproject Fedora: version 20 only; version 21 only; version 22 only
• Linux Linux Kernel: up to and including 3.19.5
• Oracle Linux: version 5.0 only
• Oracle Solaris: version 11.3 only
• Red Hat Enterprise Mrg: version 2.5 only

Published 2015-05-27. Last modified 2026-06-17.