Bug ID 428036: TMM core when system is in stable state in between IPsec phase 2 rekey

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
11.2.0, 11.3.0, 11.4.0, 11.4.1

Fixed In:
11.5.0, 11.4.1 HF4, 11.4.0 HF6

Opened: Aug 15, 2013

Severity: 3-Major

Related Article: K15195

Symptoms

This issue might occur when there is some anomaly occurred during quick mode exchange(phase 2) with some 3rd party vendors which resulted in BIG-IP updating the same SA twice. This anomaly will cause internal memory corruption and tmm will crash.

Impact

Traffic disrupted while tmm restarts.

Conditions

In some very rarely condition during IPsec rekey while interop with some 3rd party vendors(for example, FortiGate).

Workaround

None.

Fix Information

After BIG-IP established IPsec Tunnel with Fortigate, tmm will not core when system is in stable state (after rekey).

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips