Traffic Management Microkernel Termination in F5 BIG-IP Advanced WAF and ASM

CVE-2025-55669

What is CVE-2025-55669?

When F5 BIG-IP Advanced Web Application Firewall (WAF) and Application Security Manager (ASM) are configured with a specific security policy and a server-side HTTP/2 profile on a virtual server, it has been observed that certain undisclosed traffic patterns can lead to the premature termination of the Traffic Management Microkernel (TMM). This vulnerability emphasizes the need for ongoing evaluation and monitoring, especially for versions that are still under support.

References