Security Bulletin: IBM Integrated Management Module II (IMM2) is affected by a vulnerability with the IPv6 networking support (CVE-2015-2922)

Summary

The following vulnerability in IPv6 has been addressed by IBM Integrated Management Module II (IMM2).

Vulnerability Details

CVEID:CVE-2015-2922
**DESCRIPTION:**Linux Kernel, built with the IPv6 networking support(CONFIG_IPV6), is vulnerable to a denial of service, caused by the improper handling of Router Advertisements. A remote attacker from within the local network could exploit this vulnerability to set the hop_limit too low and cause a denial of service.
CVSS Base score: 3.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/102058 for the current score.
CVSS Vector: (AV:A/AC:L/Au:N/C:N/I:N/A:P)

Affected Products and Versions

Remediation/Fixes

Firmware fix versions are available on Fix Central: <http://www.ibm.com/support/fixcentral/&gt;

IBM Integrated Management Module II (IMM2) for System x and Flex

(ibm_fw_imm2_1aoo90b-7.40_anyos_noarch)

| 1AOO90B-7.40

IBM Integrated Management Module II (IMM2) for BladeCenter

(ibm_fw_imm2_1aoo90b-7.40-bc_anyos_noarch)

| 1AOO90B-7.40-bc

Workarounds and Mitigations

None