Field Notice: FN - 72468 - ASA and Firepower Software: Some Applications Might Cause Traceback and Reload on Cisco Secure Firewall 2100 Series Security Appliances - Software Upgrade Recommended

Notice

THIS FIELD NOTICE IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTY OF MERCHANTABILITY. YOUR USE OF THE INFORMATION ON THE FIELD NOTICE OR MATERIALS LINKED FROM THE FIELD NOTICE IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS FIELD NOTICE AT ANY TIME.

Revision History

Revision	Publish Date	Comments
1.0	23-May-23	Initial Release

Products Affected

Affected OS Type	Affected Software Product	Affected Release	Affected Release Number	Comments
NON-IOS	Adaptive Security Appliance (ASA) Software	9	9.8.3, 9.8.4, 9.9.2, 9.10.1, 9.12.1, 9.12.2, 9.12.3, 9.12.4, 9.13.1, 9.14.1, 9.14.2, 9.14.3, 9.14.4, 9.15.1, 9.16.1, 9.16.1 Interim, 9.16.2, 9.16.3, 9.16.4, 9.17.1, 9.18.1, 9.18.2
NON-IOS	Adaptive Security Appliance (ASA) Software	Interim	9.8.3 Interim, 9.8.4 Interim, 9.9.2 Interim, 9.10.1 Interim, 9.12.1 Interim, 9.12.2 Interim, 9.12.3 Interim, 9.12.4 Interim, 9.13.1 Interim, 9.14.1 Interim, 9.14.2 Interim, 9.14.3 Interim, 9.14.4 Interim, 9.15.1 Interim, 9.16.2 Interim, 9.16.3 Interim, 9.16.4 Interim, 9.17.1 Interim, 9.18.1 Interim, 9.18.2 Interim
NON-IOS	Firepower Threat Defense (FTD) Software	6.4	6.4.0, 6.4.0.1, 6.4.0.2, 6.4.0.3, 6.4.0.4, 6.4.0.5, 6.4.0.6, 6.4.0.7, 6.4.0.8, 6.4.0.9, 6.4.0.10, 6.4.0.11, 6.4.0.12, 6.4.0.13, 6.4.0.14, 6.4.0.15, 6.4.0.16
NON-IOS	Firepower Threat Defense (FTD) Software	6.5	6.5.0, 6.5.0.1, 6.5.0.2, 6.5.0.3, 6.5.0.4, 6.5.0.5
NON-IOS	Firepower Threat Defense (FTD) Software	6.6	6.6.0, 6.6.0.1, 6.6.1, 6.6.3, 6.6.4, 6.6.5, 6.6.5.1, 6.6.5.2, 6.6.7
NON-IOS	Firepower Threat Defense (FTD) Software	6.7	6.7.0, 6.7.0.1, 6.7.0.2, 6.7.0.3
NON-IOS	Firepower Threat Defense (FTD) Software	7.0	7.0.0, 7.0.0.1, 7.0.1, 7.0.1.1, 7.0.2, 7.0.2.1, 7.0.3, 7.0.4, 7.0.5
NON-IOS	Firepower Threat Defense (FTD) Software	7.1	7.1.0, 7.1.0.1, 7.1.0.2, 7.1.0.3
NON-IOS	Firepower Threat Defense (FTD) Software	7.2	7.2.0, 7.2.1, 7.2.2, 7.2.3

Defect Information

Defect ID	Headline
CSCvz41551	FP2100: ASA/FTD with threat-detection statistics may traceback and reload in Thread Name 'lina'

Problem Description

Some versions of Adaptive Security Appliance (ASA) and Firepower software might cause a traceback and reload condition for the Cisco Secure Firewall 2100 Series security appliances.

Background

A traceback and reload condition for the Cisco Secure Firewall 2100 Series security appliances might occur for applications that use the App-Cache process. The traceback and reload condition is due to a memory management issue that might occur for these applications.

In order to display a summary of applications that use the App-Cache process, enter the CLI command show memory app-cache. See the Cisco Secure Firewall ASA Series Command Reference or the Cisco Secure Firewall Threat Defense Command Reference for additional information.

Problem Symptom

The Cisco Secure Firewall 2100 Series security appliance reloads and indicates thread name 'lina' as the faulting thread.

Workaround/Solution

Cisco recommends to upgrade the ASA or Firepower software in order to fix the issue.

For ASA-based devices, upgrade to one of the Cisco ASA software versions shown in this table in order to resolve the traceback and reload issue.

Release Version	Fixed Version
9.8.3, 9.8.4	Upgrade to a fixed release
9.9.2	Upgrade to a fixed release
9.10.1	Upgrade to a fixed release
9.12.1, 9.12.2, 9.12.3, 9.12.4	9.12.4.55 or later
9.13.1	Upgrade to a fixed release
9.14.1, 9.14.2, 9.14.3, 9.14.4	9.14.4.17 or later
9.15.1	Upgrade to a fixed release
9.16.1, 9.16.2, 9.16.3, 9.16.4	9.16.4.9 or later
9.17.1	Upgrade to a fixed release
9.18.1, 9.18.2	9.18.2.7 or later

 

For FTD-based devices, upgrade to one of the Cisco FTD software versions shown in this table in order to resolve the traceback and reload issue.

Release Version	Fixed Version
6.1.x	Upgrade to a fixed release
6.2.x	Upgrade to a fixed release
6.3.x	Upgrade to a fixed release
6.4.x	Upgrade to a fixed release
6.5.x	Upgrade to a fixed release
6.6.x	6.6.7.1 or later
6.7.x	Upgrade to a fixed release
7.0.x	Upgrade to a fixed release
7.1.x	Upgrade to a fixed release
7.2.x	7.2.4 or later

For More Information

If you require further assistance, or if you have any further questions regarding this field notice, please contact the Cisco Systems Technical Assistance Center (TAC) by one of the following methods:

• Open a service request on Cisco.com
• By email or telephone

Receive Email Notification For New Field Notices

My Notifications—Set up a profile to receive email updates about reliability, safety, network security, and end-of-sale issues for the Cisco products you specify.