Bug ID 448846: Failing HSM can lead to memory exhaustion and crash.

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IP GTM(all modules)

Known Affected Versions:
11.2.1, 11.3.0, 11.4.0, 11.4.1, 11.5.0

Fixed In:
11.6.0, 11.5.1, 11.5.0 HF1, 11.4.1 HF4, 11.3.0 HF9, 11.2.1 HF11

Opened: Feb 12, 2014

Severity: 2-Critical

Related Article: K16415

Symptoms

When an internal HSM begins to fail, TMM which is performing DNSSEC signing will queue up many RRSIG requests. However, the memory for those requests will not be released because the HSM will never call back. This leads to memory exhaustion in TMM which triggers many other failures and perhaps a crash.

Impact

TMM crash and device failover.

Conditions

Failing HSM, DNSSEC signing of responses.

Workaround

This issue has no workaround.

Fix Information

A crash bug related to HSM and memory exhaustion has been fixed.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips