Last Modified: Sep 16, 2026
Affected Product(s):
BIG-IP APM
Known Affected Versions:
17.5.1, 17.5.1.2, 17.5.1.3, 17.5.1.4, 17.5.1.5, 17.5.1.6, 17.5.1.8, 17.5.1.9
Opened: Aug 20, 2026 Severity: 3-Major
After the fires, the server-side flow has no peer due to OneConnect detachment, and the http_data pointer is no longer valid. As a result, when "ACCESS::session remove" tries to use http_data to examine the MRHSession cookie, it encounters memory that has been reused. This leads to accessing an invalid state, which causes a core error
TMM cored, disruption in the traffic
NA
None
None