Bug ID 634259: IP tuple nexthop object can be freed while still referenced by another structure

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
11.5.3, 11.5.4, 11.5.5, 11.5.6, 11.5.7, 11.5.8, 11.5.9, 11.5.10, 11.6.0, 11.6.1

Fixed In:
11.6.2

Opened: Dec 19, 2016

Severity: 2-Critical

Related Article: K50166002

Symptoms

IP tuple nexthop object can be freed while still referenced by another structure.

Impact

The BIG-IP system might crash. This is a very timing/memory-usage dependent issue that is rarely encountered.

Conditions

This can happen if LSN is in use and the proxy connection takes some time to complete, creating a large enough time window where the nexthop object might be freed.

Workaround

None.

Fix Information

Management of IP tuple nexthop object reference counting is more consistent.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips