The vulnerability is caused by an incorrect calculation of buffer size, as identified by CWE-131. When an SSL profile is applied to a virtual server on BIG‑IP, and the system lacks Intel QuickAssist Technology (QAT) or the database variable crypto.hwacceleration is disabled, certain unhygienic traffic can force the Traffic Management Microkernel (TMM) to terminate. This results in a crash of the underlying microkernel, effectively disabling network services and causing a denial of service.

The affected vendors and products are F5 BIG‑IP, F5 BIG‑IP Next CNF, F5 BIG‑IP Next SPK, and F5 BIG‑IP Next for Kubernetes. Exact affected versions are not enumerated in the advisory; however, any installation that reaches End of Technical Support is not considered. Systems configured without QAT or with crypto.hwacceleration disabled are at risk.

The CVSS score of 8.7 reflects a high severity. No EPSS score is reported, and the issue is not listed in CISA KEV. Attackers can exploit this vulnerability by sending specially crafted SSL traffic to a virtual server that has an SSL profile enabled and insufficient hardware acceleration. The attack requires network reachability to the virtual server and the presence of a vulnerable SSL configuration; it does not require elevated privileges.