Skip to content
OpenAdvisories
High · 7.5 CVE-2025-53856 EUVD-2025-34637GHSA-m5hq-gxg5-5f9x

TMM vulnerability

Published Oct 15, 2025 · Updated Feb 26, 2026 · Assigned by f5

Description

When a virtual server, network address translation (NAT) object, or secure network address translation (SNAT) object uses the embedded Packet Velocity Acceleration (ePVA) feature, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  To determine which BIG-IP platforms have an ePVA chip refer to K12837: Overview of the ePVA feature https://my.f5.com/manage/s/article/K12837 .  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

VendorProductAffectedFixed
F5 BIG-IP 17.5.0 – < 17.5.1.3, 17.1.0 – < 17.1.3, 16.1.0 – < 16.1.6.1, 15.1.0 – < 15.1.10.8 17.5.1.3

Advisories 2

References