Last Modified: Sep 18, 2026
Affected Product(s):
BIG-IP AFM
Known Affected Versions:
17.1.0, 17.1.0.1, 17.1.0.2, 17.1.0.3, 17.1.1, 17.1.1.1, 17.1.1.2, 17.1.1.3, 17.1.1.4, 17.1.2, 17.1.2.1, 17.1.2.2, 17.1.3, 17.1.3.1, 17.1.3.2, 17.1.3.4, 17.1.3.5, 17.5.1, 17.5.1.2, 17.5.1.3, 17.5.1.4, 17.5.1.5, 17.5.1.6, 17.5.1.8, 17.5.1.9, 21.0.0, 21.0.0.1, 21.0.0.2, 21.0.0.3
Fixed In:
21.1.0
Opened: Jan 21, 2026 Severity: 3-Major
TMM crash occurs when HSB delivers events to incorrect TMM threads. The crash happens due to accessing uninitialized per-thread resources (spvawl_timer_sweep).
Traffic disrupted while tmm restarts.
TMM passing traffic through HSB; the conditions under which this are encountered are rare and difficult to reproduce.
None
Entry Point Validation: Unrecognized FSU subtypes are caught, marked as INVALID, and dropped immediately. Early Data Validation: Check for spva.type == SPVA_TYPE_INVALID during function entry. Drop corrupted or garbage data immediately without processing.