Traffic Management Microkernel Vulnerability in F5 BIG-IP Systems
CVE-2025-58096

8.2HIGH

Key Information:

Vendor

F5
Status
Big-ip
Vendor
CVE Published:
15 October 2025

What is CVE-2025-58096?

A configuration vulnerability exists in F5 BIG-IP systems when the tm.tcpudptxchecksum database variable is set to a non-default value of Software-only. This misconfiguration can lead to TMM (Traffic Management Microkernel) termination due to undisclosed traffic patterns, potentially affecting the overall performance and reliability of the system. Please note that software versions that have reached End of Technical Support (EoTS) are not included in this evaluation.

Affected Version(s)

BIG-IP 17.5.0 < 17.5.1.3

BIG-IP 17.1.0 < 17.1.3

BIG-IP 16.1.0 < 16.1.6.1

References

https://my.f5.com/manage/s/article/K000156691
vendor-advisory

CVSS V4

Score:
8.2
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

F5
JSON
.
CVE-2025-58096 : Traffic Management Microkernel Vulnerability in F5 BIG-IP Systems