CVE-2025-43915: Resource Exhaustion Vulnerability in Linkerd Package
Summary
CVE-2025-43915: Linkerd resource exhaustion vulnerability in github.com/linkerd/linkerd2. Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Linkerd is a service mesh for cloud-native applications, providing features such as load balancing, traffic management, and observability. It is designed to enhance the reliability and security of microservices architectures. However, it is susceptible to resource exhaustion vulnerabilities, which can lead to service disruptions and degraded performance.
Vulnerability Detail
The Linkerd resource exhaustion vulnerability, identified as CVE-2025-43915, arises from improper resource management within the Linkerd package (github.com/linkerd/linkerd2). This vulnerability can be exploited by an attacker to consume excessive resources, potentially leading to denial of service (DoS) conditions. The issue is present in all versions prior to 0.6.0-20250501173313-4823b7af3e1e, making it critical for users to address this flaw promptly.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary measure, users can limit the resource allocation for Linkerd instances to mitigate the impact of potential resource exhaustion. This can be done by configuring resource limits in the deployment specifications, for example:
resources: limits: cpu: "500m" memory: "512Mi"
Conclusion
The Linkerd resource exhaustion vulnerability (CVE-2025-43915) poses a significant risk to applications using the affected package. It is crucial for users to update to the patched version to ensure the security and reliability of their services. Additionally, utilizing tools like Vulert can help in monitoring for such vulnerabilities in the future.
See every vulnerability recorded for github.com/linkerd/linkerd2 →
FAQ
The vulnerability allows attackers to consume excessive resources, potentially leading to service disruptions.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
All versions prior to 0.6.0-20250501173313-4823b7af3e1e are affected by this vulnerability.
Update to the patched version of Linkerd as soon as possible to mitigate the vulnerability.
Yes, Vulert can monitor and alert you in real-time for open-source vulnerabilities in your software using just Gopkg.lock.
Related vulnerabilities
Recent vulnerabilities recorded for github.com/linkerd/linkerd2.
