> Source: [sk101976](https://support.checkpoint.com/results/sk/sk101976)

# sk101976 - Security Gateway / Cluster Member on Gaia OS with configured BGP that uses MD5 Authentication might randomly crash

| Property | Value |
|----------|-------|
| Solution ID | sk101976 |
| Date Created | 2014-08-07 |
| Last Modified | 2020-09-29 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |
| OS | Gaia |

## Symptoms

- Security Gateway / Cluster Member with configured BGP that uses MD5 Authentication might randomly crash with the following stacks:

1.

   ```
   
    #0 [...] machine_kexec at ...
    #1 [...] crash_kexec at ...
    #2 [...] kdb_main_loop at ...
    #3 [...] kdba_main_loop at ...
    #4 [...] kdb at ...
    #5 [...] kdba_entry at ...
    #6 [...] notifier_call_chain at ...
    #7 [...] __die at ...
    #8 [...] do_page_fault at ...
    #9 [...] error_exit at ...
   #10 [...] update(...) at mm.h
   #11 [...] tcp_v4_calc_md5_hash(...) at crypto.h
   #12 [...] tcp_transmit_skb(...) at tcp_output.c
   #13 [...] __tcp_push_pending_frames(...) at tcp_output.c
   #14 [...] tcp_sendmsg(...) at tcp.c
   #15 [...] do_sock_write(...) at socket.c
   #16 [...] sock_aio_write(...) at ...
   #17 [...] do_sync_write(...) at read_write.c
   #18 [...] vfs_write(...) at ... 
   #19 [...] sys_write(...) at read_write.c
   #20 [...] sysenter_do_call() at ...
   ```

2.

   ```
   
    #0 [...] machine_kexec at ...
    #1 [...] crash_kexec at ...
    #2 [...] kdb_main_loop at ...
    #3 [...] kdba_main_loop at ...
    #4 [...] kdb at ...
    #5 [...] kdba_entry at ...
    #6 [...] notifier_call_chain at ...
    #7 [...] __die at ...
    #8 [...] do_page_fault at ...
    #9 [...] error_exit at ...
       [... RIP: tcp_v4_calc_md5_hash+...]
       ... ... ...
   #10 [...] tcp_v4_calc_md5_hash(...) at tcp_ipv4.c
   #11 [...] tcp_v4_send_ack(...) at tcp_ipv4.c
   #12 [...] tcp_v4_rcv(...) at tcp_ipv4.c
   #13 [...] ip_local_deliver(...) at ip_input.c
   #14 [...] ip_rcv_finish(...) at dst.h
   #15 [...] fwlinux_filter_finish() at ...
   ... ... ...
   ```

## Cause

In some cases, kernel might crash due to incorrect processing of MD5 hash in BGP packets.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content