CVE-2025-43915
In Linkerd edge releases before edge-25.2.1, and Buoyant Enterprise for Linkerd releases 2.13.0–2.13.7, 2.14.0–2.14.10, 2.15.0–2.15.7, 2.16.0–2.16.4, and 2.17.0–2.17.1, resource exhaustion can occur for Linkerd proxy metrics.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-43915?
CVE-2025-43915 has a moderate severity level due to potential resource exhaustion in Linkerd proxy metrics.
How do I fix CVE-2025-43915?
To fix CVE-2025-43915, you should update to Buoyant Edge version edge-25.2.1 or Buoyant Enterprise for Linkerd versions 2.16.5, 2.17.2, or 2.18.0.
What products are affected by CVE-2025-43915?
CVE-2025-43915 affects Buoyant Edge versions before edge-25.2.1 and Enterprise for Linkerd versions 2.16.* before 2.16.5, 2.17.* before 2.17.2, and 2.18.* before 2.18.0.
What is resource exhaustion in the context of CVE-2025-43915?
Resource exhaustion in CVE-2025-43915 refers to the potential depletion of system resources due to excessive metrics being generated by the Linkerd proxy.
Where can I find more information about CVE-2025-43915?
For more information about CVE-2025-43915, refer to the official advisories from Buoyant and security documentation.