K21971977 : TMM vulnerability CVE-2021-22975

Security Advisory Description

Under some circumstances, Traffic Management Microkernel (TMM) may restart on the BIG-IP system while passing large bursts of traffic.
(
CVE-2021-22975
)
Impact

This vulnerability may allow an attacker to cause a denial-of-service (DoS) to the BIG-IP system. The BIG-IP system may temporarily fail to process traffic as it recovers from a TMM restart. If the BIG-IP system is configured for high availability (HA), it fails over to a peer system.

This vulnerability affects BIG-IP systems when one of the following conditions is met:

• You configured a BIG-IP APM Virtual Private Network (VPN) virtual server.
• You have a VIPRION or VIPRION-based Virtual Clustered Multiprocessing (vCMP) guest with multiple blades, and traffic-flows that traverse TMMs on different blades.