This vulnerability (CVE-2026-39458) affects F5 BIG-IP devices configured with a DNS profile enabled with DNS cache on a virtual server. An access of an uninitialized pointer in the Traffic Management Microkernel (TMM) can be triggered by undisclosed traffic, causing the TMM process to terminate. The impact is a denial of service condition due to service interruption. The CVSS 3.1 base score is 7.5, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and impact limited to availability. No patch or official remediation level has been published by the vendor as of the information provided.

The vulnerability results in denial of service by causing the TMM process to terminate unexpectedly. There is no impact on confidentiality or integrity. The service disruption could affect availability of DNS services on the affected BIG-IP devices. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor the vendor's security advisories for updates. Until a patch is available, consider limiting exposure of affected BIG-IP DNS profiles to untrusted networks if possible.