CVE Vulnerabilities

CVE-2025-58120

NULL Pointer Dereference

Published: Oct 15, 2025 | Modified: Oct 22, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

When HTTP/2 Ingress is configured, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Weakness

The product dereferences a pointer that it expects to be valid but is NULL.

Affected Software

Name Vendor Start Version End Version
Big-ip_next_cloud-native_network_functions F5 1.1.0 (including) 1.4.1 (including)
Big-ip_next_cloud-native_network_functions F5 2.0.0 (including) 2.0.0 (including)
Big-ip_next_for_kubernetes F5 2.0.0 (including) 2.0.0 (including)
Big-ip_next_service_proxy_for_kubernetes F5 1.7.0 (including) 1.7.14 (excluding)
Big-ip_next_service_proxy_for_kubernetes F5 1.7.14 (including) 1.7.14 (including)
Big-ip_next_service_proxy_for_kubernetes F5 2.0.0 (including) 2.0.0 (including)

Potential Mitigations

References