K54082580 : BIG-IP CGNAT LSN vulnerability CVE-2022-26517

Security Advisory Description

When the BIG-IP CGNAT Large Scale NAT (LSN) pool is configured on a virtual server and packet filtering is enabled, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. (CVE-2022-26517)

For more information about packet filters, refer to the Packet Filters chapter of the BIG-IP TMOS: Routing Administration manual.

Note: For information about how to locate F5 product manuals, refer to K98133564: Tips for searching AskF5 and finding product documentation.

Impact

Traffic is disrupted while the TMM process restarts. This vulnerability allows a remote unauthenticated attacker to cause a denial-of-service (DoS) on the BIG-IP system. There is no control plane exposure; this is a data plane issue only.