Boeing 737 rudder issues


During the 1990s, a series of rudder issues on Boeing 737 aircraft resulted in multiple incidents. In two separate accidents, pilots lost control of their Boeing 737 aircraft due to a sudden and unexpected movement of the rudder, and the resulting crashes killed everyone aboard. A total of 157 people aboard the two aircraft were killed. Similar rudder issues led to a temporary loss of control on at least one other Boeing 737 flight before the problem was ultimately identified. The National Transportation Safety Board determined that the accidents and incidents were the result of a design flaw that could result in an uncommanded movement of the aircraft's rudder. The issues were resolved after the NTSB identified the cause of the rudder malfunction and the Federal Aviation Administration ordered repairs for all Boeing 737 aircraft in service.

Rudder function

Unlike other twin-engine large transport aircraft in service at the time, the Boeing 737 was designed with a single rudder panel and single rudder actuator. The single rudder panel is controlled by a single hydraulic Power Control Unit. Inside the PCU is a dual servo valve that, based on input from the pilot's rudder pedals or the aircraft's yaw damper system, directs the flow of hydraulic fluid in order to move the rudder. The PCU for affected Boeing 737 aircraft was designed by Boeing and manufactured by Parker Hannifin.

First accident and investigation

On March 3, 1991, United Airlines Flight 585, a Boeing 737-200, crashed while attempting to land in Colorado Springs, Colorado. During the airplane's landing approach, the plane rolled to the right and pitched nose down into a vertical dive. The resulting crash destroyed the aircraft and killed all 25 people on board.
Although the NTSB investigated the accident, it was unable to conclusively identify the cause of the crash. The rudder PCU from Flight 585 was severely damaged, which prevented operational testing of the PCU. A review of the flight crew's history determined that Flight 585's captain strictly adhered to operating procedures and had a conservative approach to flying. A first officer who had previously flown with Flight 585's captain reported that the captain had indicated to him while landing in turbulent weather that the captain had no problem with declaring a go-around if the landing appeared unsafe. The first officer was considered to be "very competent" by the captain on previous trips they had flown together. The weather data available to the NTSB indicated that Flight 585 might have encountered a horizontal axis wind vortex that could have caused the aircraft to roll over, but this could not be shown conclusively to have happened or to have caused the rollover.
On December 8, 1992, the NTSB published a report that identified what the NTSB believed at the time to be the two most likely causes of the accident. The first possibility was that the airplane's directional control system had malfunctioned and caused the rudder to move in a manner that caused the accident. The second possibility was a weather disturbance that caused a sudden rudder movement or loss of control. The Board determined that it lacked sufficient evidence to conclude either theory as the probable cause of the accident. This was only the fourth time in the NTSB's history that it had closed an investigation and published a final aircraft accident report where the probable cause was undetermined.

Second accident

On September 8, 1994, USAir Flight 427, a Boeing 737-300, crashed near Pittsburgh, Pennsylvania. While on approach to Pittsburgh International Airport, Flight 427 suddenly rolled to the left. Although the pilots were briefly able to roll right and level the plane, it rolled left a second time and the pilots were unable to recover. The resulting crash killed all 132 people on board. The NTSB realized early into its investigation that the crash of Flight 427 might have been caused by an unintended or uncommanded rudder movement, similar to the suspected cause of the Flight 585 crash. As a result, the NTSB conducted additional testing on United Flight 585's PCU servo during its Flight 427 investigation.
One of the problems facing investigators was the relative lack of precision in the data produced by the Flight Data Recorder, which only recorded control inputs at periodic intervals with significant time gaps between samples, gaps during which no data was recorded no matter what the pilot did with the controls. This lack of precision led to it being possible for Boeing to interpret the data differently from the way the NTSB did, leading the manufacturer to suspect and insist that the pilot had responded incorrectly to a wake turbulence incident.
At the request of the NTSB, data from the Penny & Giles quick access recorder - "QAR" - of a British Airways Boeing 747-400 London-Bangkok flight in which the aircraft had suffered an uncommanded elevator movement and momentary elevator reversal on take-off, the aircraft then continuing its flight and landing safely, was supplied to the NTSB by BA. Unlike a standard FDR, the QAR sampled control input data at much shorter time intervals, as well as sampling and recording many more other aircraft parameters. This BA data led to renewed suspicion of the similar valve design used on the 737 rudder. As a result of this earlier BA incident, Boeing had, in fact, modified the design of the 747 elevator servo system, and the modified system had been retroactively fitted to all 747-400s in service.

Eastwind incident

On June 9, 1996, while the NTSB's investigation of Flight 427 was still ongoing, the pilots of Eastwind Airlines Flight 517 briefly lost control of their aircraft, a 737-200, while flying from Trenton, New Jersey to Richmond, Virginia. The aircraft experienced two episodes of rudder reversal while on approach to land in Richmond. Unlike the two prior incidents, the rudder issues on Flight 517 spontaneously resolved and the pilots were able to safely land the aircraft, and none of the 53 people on board were injured.
The NTSB investigated the Eastwind incident, and incorporated information from both United Flight 585 and Eastwind Flight 517 into its ongoing investigation of the Flight 427 crash.

Renewed investigation and conclusions

Because Eastwind Flight 517 had landed safely, the NTSB was also able to perform tests on a plane that had experienced problems similar to the accident aircraft. In addition, because the pilots of Flight 517 had survived, the NTSB was able to interview them and gain additional information on their experience. The flight's captain told the NTSB in a post-accident interview that they had not encountered any turbulence during the flight, and that, during their landing descent, he felt the rudder "kick" or "bump" even though neither pilot had moved the rudder pedals. When the plane abruptly rolled to the right, the captain applied left aileron and attempted to move the rudder, but the rudder pedal controls felt stiffer than normal and did not seem to respond to his input; when his flight control inputs did not immediately resolve the roll upset, he also advanced the throttle of the right engine in an effort to compensate.
The NTSB and Boeing engineers conducted a series of tests on the PCUs from Flight 517 and Flight 427, as well as PCUs used in other aircraft and a brand-new PCU that had not yet been used in flight. Testing revealed that under certain circumstances, the PCU's dual servo valve could jam and deflect the rudder in the opposite direction of the pilots' input. Thermal shock testing revealed that the uncommanded rudder movement could be replicated by injecting a cold PCU with hot hydraulic fluid. Thermal shock resulted in the servo's secondary slide becoming jammed against the servo housing, and that when the secondary slide was jammed the primary slide could move to a position that resulted in rudder movement opposite of the pilot's commands. The NTSB concluded that all three rudder incidents were most likely due to the PCU secondary slide jamming and excessive travel of the primary slide, resulting in the rudder reversal.
On March 24, 1999, after a four-year investigation, the NTSB issued its probable cause finding for Flight 427. The NTSB concluded that the probable cause of the Flight 427 crash was rudder reversal due to the PCU servo malfunction. Two years later, the NTSB published an amended accident report for Flight 585 that found the same probable cause for that accident as well.
As a result of the NTSB's findings, the Federal Aviation Administration ordered that the servo valves be replaced on all 737s by November 12, 2002. The FAA also ordered new training protocols for pilots to handle in an unexpected movement of flight controls.

Other suspected 737 rudder PCU malfunctions

The following Boeing 737 aircraft incidents were also suspected of being caused by a rudder PCU malfunction:
On December 19, 1997, SilkAir Flight 185 crashed in Indonesia, killing 104 people. Because the crash involved a Boeing 737-300 rolling and diving toward the ground at a steep angle, investigators considered the possibility of rudder hardover due to PCU servo malfunction. The Indonesian National Transportation Safety Committee, the lead investigating agency, concluded in its December 14, 2000 final report that it had found "no evidence to explain the cause of the accident." However, on the same day the U.S. NTSB, which also participated in the investigation, issued its own final report that contradicted the Indonesian NTSC findings. The NTSB's report found that there was sufficient evidence to rule out mechanical failure, and that the probable cause of the accident was "intentional pilot action," most likely the captain, purposely crashing the aircraft by applying sustained nose-down control pressure.
In 2004, following an independent investigation of the recovered PCU/dual-servo unit, a Los Angeles jury, which was not allowed to hear or consider the NTSB's conclusions about the accident, ruled that the 737's rudder was the cause of the crash, and ordered Parker Hannifin, a rudder component manufacturer, to pay US$44 million to the plaintiff families. Parker Hannifin subsequently appealed the verdict, which resulted in an out-of-court settlement for an undisclosed amount.

In popular culture

The Discovery Channel Canada TV Series Mayday dramatized the NTSB's 737 rudder investigation in a 2007 episode titled "Hidden Danger".
Mayday separately dramatized the SilkAir crash investigation and lawsuit, including its connection to the 737 rudder controversy, in a 2012 episode titled "Pushed to the Limit".