This vulnerability in F5 BIG-IP arises from a loop with an unreachable exit condition (infinite loop) when ePVA acceleration is enabled. Undisclosed local ethernet traffic can cause the ePVA and TMM components to consume excessive resources, potentially impacting system availability. The CVSS 3.1 base score is 6.5 (medium), reflecting an attack vector requiring adjacent network access, no privileges, and no user interaction, with impact limited to availability. No official fix or mitigation has been published by the vendor as of the data provided.

The vulnerability can cause increased resource utilization in critical components of the BIG-IP system, specifically ePVA and TMM, leading to potential denial of service conditions. Confidentiality and integrity are not impacted. Exploitation requires access to local ethernet traffic and does not require privileges or user interaction. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is provided, monitor vendor communications for updates. Until a fix is available, consider limiting exposure of ePVA-enabled BIG-IP devices to untrusted local ethernet traffic if feasible.