PT-2025-42326

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions affected versions not specified Description An issue exists in F5 BIG-IP systems utilizing the embedded Packet Velocity Acceleration ePVA feature. Undisclosed traffic can lead to the termination of the Traffic Management...

CVE-2025-48008: Use After Free

When a TCP profile with Multipath TCP MPTCP enabled is configured on a virtual server, undisclosed traffic along with conditions beyond the attacker's control can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS ar...

F5 BIG-IP 安全漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A denial-of-service vulnerability exists in the IPsec module of BIG-IP, which can be exploited to cause the termination of the...

PT-2025-42334

Name of the Vulnerable Software and Affected Versions F5 BIG-IP Advanced WAF and ASM affected versions not specified Description When configured with a server-side HTTP/2 profile and a security policy, the Traffic Management Microkernel TMM may terminate due to undisclosed traffic. This can lead ...

PT-2025-42344

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions affected versions not specified Description A flaw exists in the BIG-IP Application Firewall Manager AFM when a DoS protection profile is configured on a virtual server. Undisclosed requests can lead to the termination of th...

F5 BIG-IP 安全漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A security vulnerability exists in the F5 BIG-IP that originates when configuring security policies and server-side HTTP/2 profiles, where...

PT-2025-42335

Name of the Vulnerable Software and Affected Versions BIG-IP Next CNF, BIG-IP Next SPK, and BIG-IP Next for Kubernetes affected versions not specified Description Repeated undisclosed API calls can cause the Traffic Management Microkernel TMM to terminate. The affected systems include BIG-IP Next...

PT-2025-42338

Name of the Vulnerable Software and Affected Versions F5 BIG-IP Next versions affected versions not specified Description A flaw exists in the HTTP/2 Ingress component of F5 BIG-IP Next, where undisclosed traffic can lead to the termination of the Traffic Management Microkernel TMM. This can...

F5 BIG-IP和F5 SSL Orchestrator 缓冲区错误漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A memory corruption vulnerability exists in the Explicit Forward Proxy module of the BIG-IP SSL Orchestrator. The vulnerabilit...

PT-2025-42337

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions affected versions not specified Description A flaw in the Traffic Management Microkernel TMM can lead to denial of service. When the database variable tm.tcpudptxchecksum is configured with a non-default value on a BIG-IP...

PT-2025-42323

Name of the Vulnerable Software and Affected Versions F5 BIG-IP affected versions not specified Description When a TCP profile with Multipath TCP MPTC enabled is configured on a virtual server, undisclosed traffic, along with conditions beyond the attacker's control, can cause the Traffic...

CVE-2025-55669: Operation on a Resource after Expiration or Release

When the BIG-IP Advanced WAF and ASM security policy and a server-side HTTP/2 profile are configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-58071: Use of Uninitialized Variable

When IPsec is configured on the BIG-IP system, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-60016: Improper Restriction of Operations within the Bounds of a Memory Buffer

When Diffie-Hellman DH group Elliptic Curve Cryptography ECC Brainpool curves are configured in an SSL profile's Cipher Rule or Cipher Group, and that profile is applied to a virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions...

CVE-2025-58096: Out-of-bounds Write

When the database variable tm.tcpudptxchecksum is configured as non-default value Software-only on a BIG-IP system, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-41430: Allocation of Resources Without Limits or Throttling

When BIG-IP SSL Orchestrator is enabled, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-54479: Out-of-bounds Write

When a classification profile is configured on a virtual server without an HTTP or HTTP/2 profile, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-59478: Access of Uninitialized Pointer

When a BIG-IP AFM denial-of-service DoS protection profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM process to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-61990: Double Free

When using a multi-bladed platform with more than one blade, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-61960: NULL Pointer Dereference

When a per-request policy is configured on a BIG-IP APM portal access virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...