The vulnerability resides in the Traffic Management Microkernel (TMM) of F5 BIG‑IP appliances, where an attacker can send undisclosed UDP requests that cause the system to crash. Exploiting this flaw results in service termination for the affected virtual server, creating a denial‑of‑service situation that can disrupt network traffic and business operations.

Affected products are F5 BIG‑IP, BIG‑IP Next CNF, and BIG‑IP Next for Kubernetes. No specific version range is provided in the advisory, but the exception note indicates that any supported version prior to end of technical support may be vulnerable.

The CVSS score of 8.7 indicates a high severity and a significant impact if attacked. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, implying there is no publicly known exploit yet but the high CVSS suggests it is a serious risk. The likely attack vector is remote, as UDP packets can be sent from an external network to trigger the crash. Attacking an exposed virtual server with a specially crafted packet can cause the TMM to terminate, leading to a service outage until a restart or remediation occurs.