CVE-2025-54805CWE-401

CVE-2025-54805

Medium · published October 15, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
22.2
In the wild
Unconfirmed
What it is

When an iRule is configured on a virtual server via the declarative API, upon re-instantiation, the cleanup process can cause an increase in the Traffic Management Microkernel (TMM) memory resource utilization.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00306 · 22.2th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2025-10-15T18:15Z
Affected products (3)
ProductVersionsFixed in
f5/big-ip_next_cloud-native_network_functions≥ 1.1.0, ≤ 1.4.1—
f5/big-ip_next_for_kubernetesall versions—
f5/big-ip_next_service_proxy_for_kubernetes≥ 1.7.0, ≤ 1.9.2—
References (1)
https://my.f5.com/manage/s/article/K000151596 · [email protected]
EPSS history
Timeline
  • 15 OCT 13:55Z
    TMM Vulnerability
    cvelistv5