Medium
Security advisory
In Linkerd edge releases before edge-25.2.1, and Buoyant Enterprise for Linkerd releases 2.13.0–2.13.7, 2.14.0–2.14.10, 2.15.0–2.15.7, 2.16.0–2.16.4, and 2.17.0–2.17.1, resource exhaustion can occur for Linkerd proxy metrics.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2025-43915
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 5 Nov 2026, 01:33 UTC · Revision 1
Source evidence
In Linkerd edge releases before edge-25.2.1, and Buoyant Enterprise for Linkerd releases 2.13.0–2.13.7, 2.14.0–2.14.10, 2.15.0–2.15.7, 2.16.0–2.16.4, and 2.17.0–2.17.1, resource exhaustion can occur for Linkerd proxy metrics.
osv:CVE-2025-43915
Complete source record
{
"id": "afb3be05d4c878ea09558b66bde4b60114097e278a90e34b7cbc242d66ebd246",
"url": "https://osv.dev/vulnerability/CVE-2025-43915",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2025-43915",
"summary": "In Linkerd edge releases before edge-25.2.1, and Buoyant Enterprise for Linkerd releases 2.13.0–2.13.7, 2.14.0–2.14.10, 2.15.0–2.15.7, 2.16.0–2.16.4, and 2.17.0–2.17.1, resource exhaustion can occur for Linkerd proxy metrics.",
"evidence": "osv:CVE-2025-43915",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2025-43915",
"aliases": [
"CVE-2025-43915",
"GHSA-42mr-jpwh-m9rv",
"GO-2025-3664"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/linkerd/linkerd2",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "faa3f617eef5b53c86829cb88687bbfa8cc1d3ed"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:linkerd:linkerd:*:*:*:*:edge:kubernetes:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "25.2.1"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"edge-25.1.2",
"edge-25.1.1",
"version-2.17",
"edge-24.11.8",
"edge-24.11.7",
"edge-24.11.6",
"edge-24.11.5",
"edge-24.11.4",
"edge-24.11.3",
"edge-24.11.2",
"edge-24.11.1",
"edge-24.10.5",
"edge-24.10.4",
"edge-24.10.3",
"edge-24.10.2",
"edge-24.10.1",
"edge-24.9.3",
"edge-24.9.2",
"edge-24.9.1",
"edge-24.8.3",
"version-2.16",
"edge-24.8.2",
"edge-24.8.1",
"edge-24.7.5",
"edge-24.7.4",
"edge-24.7.3",
"edge-24.7.2",
"edge-24.7.1",
"edge-24.6.4",
"edge-24.6.3",
"edge-24.6.2",
"edge-24.6.1",
"edge-24.5.5",
"edge-24.5.4",
"edge-24.5.3",
"edge-24.5.2",
"edge-24.5.1",
"edge-24.4.5",
"edge-24.4.4",
"edge-24.4.3",
"edge-24.4.2",
"edge-24.4.1",
"edge-24.3.5",
"edge-24.3.4",
"edge-24.3.3",
"edge-24.3.2",
"edge-24.2.5",
"edge-24.3.1",
"version-2.15",
"edge-24.2.4",
"edge-24.2.3",
"edge-24.2.2",
"edge-24.2.1",
"edge-24.1.3",
"edge-24.1.2",
"edge-24.1.1",
"edge-23.12.4",
"edge-23.12.3",
"edge-23.12.2",
"edge-23.12.1",
"edge-23.11.4",
"edge-23.11.3",
"edge-23.11.2",
"edge-23.11.1",
"edge-23.10.4",
"edge-23.10.3",
"edge-23.10.2",
"edge-23.10.1",
"edge-23.9.4",
"edge-23.9.3",
"edge-23.9.2",
"edge-23.9.1",
"stable-2.14.0",
"edge-23.8.3",
"edge-23.8.2",
"edge-23.8.1",
"edge-23.7.3",
"edge-23.7.2",
"edge-23.7.1",
"edge-23.6.3",
"edge-23.6.2",
"edge-23.6.1",
"edge-23.5.3",
"edge-23.5.2",
"edge-23.5.1",
"stable-2.13.1",
"edge-23.4.3",
"edge-23.4.2",
"stable-2.13.0",
"edge-23.4.1",
"edge-23.3.4",
"edge-23.3.3",
"edge-23.3.2",
"edge-23.3.1",
"edge-23.2.3",
"edge-23.2.2",
"edge-23.2.1",
"edge-23.1.2",
"edge-23.1.1",
"edge-22.12.1",
"edge-22.11.3",
"edge-22.11.2",
"edge-22.11.1",
"edge-22.10.3",
"edge-22.10.2",
"edge-22.10.1",
"stable-2.12.1",
"edge-22.9.2",
"edge-22.9.1",
"edge-22.8.3",
"stable-2.12.0",
"stable-2.12.0-rc2",
"edge-22.8.2",
"edge-22.8.1",
"edge-22.7.3",
"edge-22.7.2",
"edge-22.7.1",
"edge-22.6.2",
"edge-22.6.1",
"edge-22.5.3",
"edge-22.5.2",
"edge-22.5.1",
"edge-22.4.1",
"edge-22.3.5",
"edge-22.3.4",
"edge-22.3.3",
"edge-22.3.2",
"edge-22.3.1",
"edge-22.2.4",
"edge-22.2.3",
"edge-22.2.2",
"edge-22.2.1",
"edge-22.1.5",
"edge-22.1.4",
"edge-22.1.3",
"edge-22.1.2",
"edge-22.1.1",
"edge-21.12.4",
"edge-21.12.3",
"edge-21.12.2",
"edge-21.12.1",
"edge-21.11.4",
"edge-21.11.3",
"edge-21.11.2",
"edge-21.11.1",
"edge-21.10.3",
"edge-21.10.2",
"edge-21.10.1",
"stable-2.11.0",
"edge-21.9.5",
"edge-21.9.4",
"edge-21.9.3",
"edge-21.9.2",
"edge-21.8.4",
"edge-21.8.3",
"edge-21.8.2",
"edge-21.8.1",
"edge-21.7.5",
"edge-21.7.4",
"edge-21.7.3",
"edge-21.7.2",
"edge-21.7.1",
"edge-21.6.5",
"edge-21.6.4",
"edge-21.6.3",
"edge-21.6.2",
"edge-21.6.1",
"edge-21.5.3",
"edge-21.5.2",
"edge-21.5.1",
"stable-2.10.1",
"edge-21.4.5",
"edge-21.4.4",
"edge-21.4.3",
"edge-21.4.2",
"edge-21.4.1",
"edge-21.3.4",
"edge-21.3.3",
"stable-2.10.0",
"edge-21.3.2",
"edge-21.3.1",
"edge-21.2.4",
"edge-21.2.3",
"edge-21.2.2",
"edge-21.2.1",
"edge-21.1.4",
"edge-21.1.3",
"edge-21.1.2",
"edge-21.1.1",
"edge-20.12.4",
"edge-20.12.3",
"edge-20.12.2",
"stable-2.9.0",
"edge-20.12.1",
"edge-20.11.5",
"edge-20.11.4",
"edge-20.11.3",
"edge-20.11.2",
"edge-20.11.1",
"edge-20.10.6",
"edge-20.10.5",
"edge-20.10.4",
"edge-20.10.3",
"edge-20.10.2",
"edge-20.10.1",
"edge-20.9.4",
"edge-20.9.3",
"edge-20.9.2",
"edge-20.9.1",
"edge-20.8.4",
"edge-20.8.3",
"edge-20.8.2",
"edge-20.8.1",
"edge-20.7.5",
"edge-20.7.4",
"edge-20.7.3",
"edge-20.7.2",
"edge-20.7.1",
"edge-20.6.4",
"stable-2.8.1",
"edge-20.6.3",
"stable-2.8.0",
"edge-20.6.2",
"edge-20.6.1",
"edge-20.5.5",
"edge-20.5.4",
"edge-20.5.3",
"edge-20.5.2",
"edge-20.5.1",
"edge-20.4.5",
"edge-20.4.4",
"edge-20.4.3",
"edge-20.4.2",
"stable-2.7.0",
"edge-20.4.1",
"edge-20.3.4",
"edge-20.3.3",
"edge-20.3.2",
"edge-20.3.1",
"edge-20.2.3",
"edge-20.2.2",
"edge-20.2.1",
"edge-20.1.4",
"edge-20.1.3",
"edge-20.1.2",
"edge-20.1.1",
"edge-19.12.3",
"stable-2.6.0",
"edge-19.12.2",
"edge-19.12.1",
"edge-19.11.3",
"edge-19.11.2",
"edge-19.11.1",
"edge-19.10.5",
"edge-19.10.4",
"edge-19.10.3",
"edge-19.10.2",
"edge-19.10.1",
"edge-19.9.5",
"edge-19.9.4",
"edge-19.9.3",
"edge-19.9.2",
"edge-19.9.1",
"edge-19.8.7",
"edge-19.8.6",
"stable-2.5.0",
"edge-19.8.5",
"edge-19.8.4",
"edge-19.8.3",
"edge-19.8.2",
"edge-19.8.1",
"edge-19.7.5",
"edge-19.7.4",
"stable-2.4.0",
"edge-19.7.3",
"edge-19.7.2",
"edge-19.7.1",
"edge-19.6.4",
"edge-19.6.3",
"edge-19.6.2",
"edge-19.6.13",
"edge-19.6.1",
"edge-19.5.4",
"stable-2.3.0",
"edge-19.5.3",
"edge-19.5.2",
"edge-19.5.1",
"edge-19.4.5",
"edge-19.4.4",
"edge-19.4.3",
"edge-19.4.2",
"edge-19.4.1",
"edge-19.3.3",
"edge-19.3.2",
"edge-19.3.1",
"edge-19.2.5",
"edge-19.2.4",
"stable-2.2.0",
"edge-19.2.3",
"edge-19.2.2",
"edge-19.2.1",
"edge-19.1.4",
"edge-19.1.3",
"edge-19.1.2",
"edge-19.1.1",
"edge-18.12.4",
"edge-18.12.3",
"stable-2.1.0",
"edge-18.12.2",
"edge-18.12.1",
"edge-18.11.3",
"edge-18.11.2",
"edge-18.11.1",
"edge-18.10.4",
"edge-18.10.3",
"edge-18.10.2",
"edge-18.10.1",
"edge-18.9.3",
"stable-2.0.0",
"edge-18.9.2",
"v18.9.1",
"v18.8.4",
"v18.8.3",
"v18.8.2",
"v18.8.1",
"v18.7.3",
"v18.7.2",
"v18.7.1",
"v0.5.0",
"v0.4.4",
"v0.4.3",
"v0.4.2",
"v0.4.1",
"v0.4.0",
"v0.3.1",
"v0.3.0",
"v0.2.0",
"v0.1.3",
"v0.1.2",
"v0.1.1",
"v0.1.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-43915.json"
}
}
],
"modified": "2026-10-28T02:30:41.190233770Z",
"provider": "osv",
"references": [
"https://www.buoyant.io/resources",
"https://docs.buoyant.io/security/advisories/2025-01/",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/43xxx/CVE-2025-43915.json",
"https://nvd.nist.gov/vuln/detail/CVE-2025-43915"
],
"provider_metadata": {
"cna_assigner": "mitre",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/43xxx/CVE-2025-43915.json"
}
},
"related_cves": [
{
"value": "CVE-2025-43915",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 509106,
"published_at": "2025-05-05T00:00:00+00:00"
}