6.5
Medium
CVE-2025-54805 When an iRule is configured on a virtual server via the declarative API, upon re-instantiation, the cleanup process…
Description
When an iRule is configured on a virtual server via the declarative API, upon re-instantiation, the cleanup process can cause an increase in the Traffic Management Microkernel (TMM) memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BIG-IP Next SPK 2.0 | earliest → < 2.0.0 | 2.0.0 |
| BIG-IP Next SPK 1.7 | 1.7.0 → latest | No fix stated |
| BIG-IP Next CNF 2.0 | earliest → < 2.0.0 | 2.0.0 |
| BIG-IP Next CNF 1.1 | 1.1.0 → latest | No fix stated |
| BIG-IP Next for Kubernetes 2.0 | 2.0.0 → < 2.1.0 | 2.1.0 |
References
- my.f5.com my.f5.com
Timeline
- Published
- Last modified
Other CVEs of BIG-IP Next SPK
The 23 CVEs of BIG-IP Next SPK →
CVE-2026-59762
When an HTTP/2 profile is configured on a virtual server, undisclosed requests can cause an increase in memory…
7.5
High
CVE-2026-42409
When an HTTP/2 profile and an iRule containing the HTTP::redirect or HTTP::respond command are configured on a virtual…
7.5
High
CVE-2026-40618
When an SSL profile is configured on a virtual server on BIG-IP Virtual Edition (VE) without Intel QuickAssist…
7.5
High
CVE-2026-40629
When SSL profiles are configured on a virtual server, undisclosed traffic can cause the virtual server to stop…
7.5
High