Bug ID 2291281: [AFM] TMM SIGSEGV Crash Due To Freed DWBL Blob

Last Modified: Jul 28, 2026

Affected Product(s):
BIG-IP AFM(all modules)

Fixed In:
17.5.1.8, 17.1.3.4

Opened: Apr 30, 2026

Severity: 2-Critical

Symptoms

AFM provisioned, TMM crash, holds a stale classifier reference into a freed DWBL blob, causing SIGSEGV

Impact

TMM restarts

Conditions

A virtual server with an IP intelligence policy is modified at the same time dwbld activates a new blob in TMM, may causing the VIP's classifier update to be silently skipped

Workaround

None

Fix Information

The DWBL classifier now maintains a reference-counted pointer to the blob it is associated with. When a classifier is created or updated, it acquires a reference. When it is freed, it releases that reference. Instead of immediately freeing the old blob, it is marked as retired and is only actually freed when the reference count reaches zero, and the retired status is set to TRUE.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips