CVE Vulnerabilities

CVE-2025-58120

NULL Pointer Dereference

Published: Oct 15, 2025 | Modified: Oct 22, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

When HTTP/2 Ingress is configured, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Weakness

The product dereferences a pointer that it expects to be valid but is NULL.

Affected Software

NameVendorStart VersionEnd Version
Big-ip_next_cloud-native_network_functionsF51.1.0 (including)1.4.1 (including)
Big-ip_next_cloud-native_network_functionsF52.0.0 (including)2.0.0 (including)
Big-ip_next_for_kubernetesF52.0.0 (including)2.0.0 (including)
Big-ip_next_service_proxy_for_kubernetesF51.7.0 (including)1.7.14 (excluding)
Big-ip_next_service_proxy_for_kubernetesF51.7.14 (including)1.7.14 (including)
Big-ip_next_service_proxy_for_kubernetesF52.0.0 (including)2.0.0 (including)

Potential Mitigations

References