CVE-2015-8215 PUBLISHED

net/ipv6/addrconf.c in the IPv6 stack in the Linux kernel before 4.0 does not validate attempted changes to the MTU value, which allows context-dependent attackers to cause a denial of service (packet loss) via a value that is (1) smaller than the minimum compliant value or (2) larger than the MTU of an interface, as demonstrated by a Router Advertisement (RA) message that is not validated by a daemon, a different vulnerability than CVE-2015-0272. NOTE: the scope of CVE-2015-0272 is limited to the NetworkManager product.

EPSS 6.24% · 90.8th percentile

Risk Scores

EPSS Score
6.24%
90.8th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSlinux-raspi25.3.0-1007.8, 0, 5.4.0-1006.6
Ubuntu:18.04:LTSlinux-hwe-edge5.0.0-16.17~18.04.1, 5.0.0-17.18~18.04.1, 5.0.0-19.20~18.04.1
Ubuntu:20.04:LTSlinux-gke5.4.0-1095.102, 5.4.0-1096.103, 5.4.0-1097.104
Ubuntu:20.04:LTSlinux-azure-fde5.4.0-1080.83+cvm1.1, 0, 5.4.0-1063.66+cvm2.2
Ubuntu:18.04:LTSlinux-azure5.0.0-1031.33, 5.0.0-1035.37, 5.0.0-1036.38
Ubuntu:22.04:LTSlinux-intel-iot-realtime0, 5.15.0-1073.75
Ubuntu:24.04:LTSlinux-raspi-realtime0, 6.8.0-2019.20
Ubuntu:18.04:LTSlinux-gcp4.15.0-1026.27, 5.0.0-1034.35, 5.0.0-1033.34
Ubuntu:20.04:LTSlinux-gkeop5.4.0-1087.91, 5.4.0-1088.92, 5.4.0-1089.93
Ubuntu:24.04:LTSlinux-riscv6.8.0-60.63.1, 0, 6.5.0-9.9.1
Ubuntu:24.04:LTSlinux-gcp-6.116.11.0-1006.6~24.04.2, 6.11.0-1011.11~24.04.1, 0
Ubuntu:18.04:LTSlinux-hwe5.0.0-23.24~18.04.1, 5.0.0-25.26~18.04.1, 5.0.0-27.28~18.04.1
Ubuntu:20.04:LTSlinux-riscv5.4.0-24.28, 5.4.0-30.34, 5.4.0-28.32
Ubuntu:22.04:LTSlinux-realtime5.15.0-1032.35, 0
Ubuntu:24.04:LTSlinux-realtime6.8.1-1015.16, 0
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.110, 6.11.0-1009.10~24.04.1, 6.11.0-1011.12~24.04.1
Ubuntu:22.04:LTSlinux-riscv5.15.0-1020.23, 5.15.0-1019.22, 5.15.0-1018.21
Ubuntu:14.04:LTSlinux-lts-vivid3.19.0-22.22~14.04.1, 3.19.0-23.24~14.04.1, 3.19.0-25.26~14.04.1
Ubuntu:14.04:LTSlinux-lts-utopic3.16.0-39.53~14.04.1, 3.16.0-50.66~14.04.1, 3.16.0-50.67~14.04.1
Ubuntu:24.04:LTSlinux-azure-6.116.11.0-1014.14~24.04.1, 6.11.0-1017.17~24.04.1, 6.11.0-1018.18~24.04.1

…and 3 more

Timeline

References

Open in Interactive Console →