Last Modified: Jul 12, 2023
Affected Product(s):
BIG-IP TMOS
Known Affected Versions:
13.1.1.4, 13.1.1.3, 13.1.1.2, 13.1.1, 13.1.0.8, 13.1.0.7, 13.1.0.6, 13.1.0.5, 13.1.0.4, 13.0.1, 12.1.4, 12.1.3.7, 12.1.3.6, 12.1.3.5, 12.1.3.4, 12.1.3.3, 11.6.4, 11.6.3.3, 11.6.3.2, 11.6.3.1, 11.5.9, 11.5.8, 11.5.7, 11.5.6
Opened: May 11, 2018 Severity: 2-Critical Related Article:
K55001345
The BIG-IP system spontaneously reboots if it is running a release with the Meltdown fixes and uses an AMD processor. The system logs messages similar to the following in /var/log/ltm after the reboot: -- notice chmand[7529]: 012a0005:5: CPLD indicates prior Host CPU subsystem reset -- notice chmand[7529]: 012a0005:5: Host CPU subsystem reset - PCI reset asserted -- chmand[7529]: 012a0005:5: Host CPU subsystem reset caused by a Southbridge system reset
The BIG-IP system reboots causing traffic disruption.
- BIG-IP systems with AMD processors. - Running a release that contains the Meltdown fixes. For details about which software versions contain these fixes, see K91229003: Side-channel processor vulnerabilities CVE-2017-5715, CVE-2017-5753, and CVE-2017-5754 :: https://support.f5.com/csp/article/K91229003.
The workaround is to disable PTI, save the config and reboot. The reboot is required to ensure that the BIG-IP system has never been in a state where PTI was enabled. # tmsh modify sys db kernel.pti value disable # tmsh save sys config # reboot
None