BugZero | Cisco BugID CSCwe12134 - Cat9000 - 17.3.6: Supervisor crash due to ngmod_ma...

Loading...

Operational Defect Database

A free repository of operational (non-security) bugs centralized through custom integrations with leading IT vendors.

Product

BugZero Prevent
BugZero Plan
Operational Risk Scoring
Vendor Integrations

Company

Plans
Value Guide
About
Contact us
Legal

Resources

Blog
ServiceNow App
Trust Center
Risk Management
NIST
DORA

Operational Defect Database

A free repository of operational (non-security) bugs centralized through custom integrations with leading IT vendors.

Product

BugZero Prevent
BugZero Plan
Operational Risk Scoring
Vendor Integrations

Company

Plans
Value Guide
About
Contact us
Legal

Resources

Blog
ServiceNow App
Trust Center
Risk Management
NIST
DORA

©2025 BugZero. All Rights Reserved.

Privacy Policy Terms of Service

BugZero | Cisco BugID CSCwe12134 - Cat9000 - 17.3.6: Supervisor crash due to ngmod_ma...

ODD
Cisco
CSCwe12134

Cisco - Defect ID: CSCwe12134

Cat9000 - 17.3.6: Supervisor crash due to ngmod_macsec_sa_sc_res process stuck more than 5 minutes

ODD
Cisco
CSCwe12134

Cisco - Defect ID: CSCwe12134

Cat9000 - 17.3.6: Supervisor crash due to ngmod_macsec_sa_sc_res process stuck more than 5 minutes

Last updated on February 22nd, 2026

BugZero Risk Score
7.8 High

Overall: 7.8

Severity: 8.2

Lifecycle: 9.1

Popularity: 4.6

What is the BugZero Risk Score?

Cisco Integration

Learn more about where this data comes from

Cisco Integration

BugZero Plan

Streamline upgrades with automated vendor bug scrubs

BugZero Plan

BugZero Prevent

Wish you caught this bug sooner? Get proactive today.

BugZero Prevent

Bug Details

Description

Symptom

Active Supervisor/Switch crash / failover can occur suddenly. %PMAN-3-RPSWITCH: RP switch initiated. Critical process linux_iosd-image has failed (rc 0) %PMAN-3-PROCHOLDDOWN: The process linux_iosd-image has been helddown (rc 134) %PMAN-0-PROCFAILCRIT: A critical process linux_iosd_image has failed (rc 134) Before the crash, the following errors will start appearing in the logs: %IOSXE_INFRA-6-PROCPATH_CLIENT_HOG: IOS shim client 'iosd-spa' has taken 3514 msec (runtime: 0 msec) to process a 'ngmod_macsec_sa_sc_res' message These errors will continue appearing for 5 minutes before the actual crash event occurs.

Conditions

Seen on Cat9000 switches with IOS 17.3.x and 17.6.x with MACSec running with Endpoints / Anyconnect NAM. Crashes are commonly seen after ISE migration, or new ISE implementation.

Workaround

Issue is not seen on 17.9.x releases.

Further Problem Description

The crash itself is very generic: the switch will crash due to messages/process taking too long.

Change history

2026-01-11 Added: 17.3.6

Relevant Products

Click on a version to see all relevant bugs

Affected versions:17.3.6

Fixed versions: 17.12.02a, 17.12.1, 17.12.1a, 17.12.1w, 17.12.1x, 17.12.1y, 17.12.1z, 17.12.1z1, 17.12.1z2, 17.12.1z3, 17.12.1z4, 17.12.1z5, 17.12.1z6, 17.12.2, 17.12.2a, 17.12.3, 17.12.3a, 17.12.4, 17.12.4a, 17.12.4b, 17.12.5, 17.12.5a, 17.12.5b, 17.12.5c, 17.12.5d, 17.12.6, 17.12.6a, 17.12.6b, 17.13.1, 17.13.1a, 17.14.1, 17.14.1a, 17.15.1, 17.15.1a, 17.15.1b, 17.15.1w, 17.15.1x, 17.15.1y, 17.15.1z, 17.15.2, 17.15.2a, 17.15.2b, 17.15.2c, 17.15.3, 17.15.3a, 17.15.3b, 17.15.4, 17.15.4a, 17.15.4b, 17.15.4c, 17.15.4d, 17.15.4s1, 17.15.5, 17.16.1, 17.16.1a, 17.17.1, 17.18.1, 17.18.1a, 17.18.1w, 17.18.1x, 17.18.2, 17.3.7, 17.3.8, 17.3.8a, 17.6.6, 17.6.6a, 17.6.7, 17.6.8, 17.6.8a, 17.9.4, 17.9.4a, 17.9.5, 17.9.5a, 17.9.5b, 17.9.5c, 17.9.5d, 17.9.5e, 17.9.5f, 17.9.6, 17.9.6a, 17.9.6b, 17.9.7, 17.9.7a, 17.9.7b, 17.9.8, Amsterdam-17.3.7, Bengaluru-17.6.6, Cupertino-17.9.4, Dublin-17.12.1

Relevant Products

Click on a version to see all relevant bugs

Affected versions:17.3.6

Fixed versions: 17.12.02a, 17.12.1, 17.12.1a, 17.12.1w, 17.12.1x, 17.12.1y, 17.12.1z, 17.12.1z1, 17.12.1z2, 17.12.1z3, 17.12.1z4, 17.12.1z5, 17.12.1z6, 17.12.2, 17.12.2a, 17.12.3, 17.12.3a, 17.12.4, 17.12.4a, 17.12.4b, 17.12.5, 17.12.5a, 17.12.5b, 17.12.5c, 17.12.5d, 17.12.6, 17.12.6a, 17.12.6b, 17.13.1, 17.13.1a, 17.14.1, 17.14.1a, 17.15.1, 17.15.1a, 17.15.1b, 17.15.1w, 17.15.1x, 17.15.1y, 17.15.1z, 17.15.2, 17.15.2a, 17.15.2b, 17.15.2c, 17.15.3, 17.15.3a, 17.15.3b, 17.15.4, 17.15.4a, 17.15.4b, 17.15.4c, 17.15.4d, 17.15.4s1, 17.15.5, 17.16.1, 17.16.1a, 17.17.1, 17.18.1, 17.18.1a, 17.18.1w, 17.18.1x, 17.18.2, 17.3.7, 17.3.8, 17.3.8a, 17.6.6, 17.6.6a, 17.6.7, 17.6.8, 17.6.8a, 17.9.4, 17.9.4a, 17.9.5, 17.9.5a, 17.9.5b, 17.9.5c, 17.9.5d, 17.9.5e, 17.9.5f, 17.9.6, 17.9.6a, 17.9.6b, 17.9.7, 17.9.7a, 17.9.7b, 17.9.8, Amsterdam-17.3.7, Bengaluru-17.6.6, Cupertino-17.9.4, Dublin-17.12.1

Top Cisco Defects

9.7Defect ID: CSCwq31287
Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability
9.7Defect ID: CSCwj74769
After [non]pairwise key enabling and reboot, bfd ip and port mismatch on device.
9.7Defect ID: CSCwt50498
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
9.7Defect ID: CSCws61409
Live Logs Not Displaying on GUI Due to Fast Expansion of MNT Database
9.7Defect ID: CSCwe44571
FMC: GEOLOCATION size is causing upgrade failures

Ready to prevent the next vendor outage?

Links

Original Vendor Announcement

Cisco Integration

Learn more about where this data comes from

Cisco Integration

BugZero Plan

Streamline upgrades with automated vendor bug scrubs

BugZero Plan

BugZero Prevent

Wish you caught this bug sooner? Get proactive today.

BugZero Prevent