Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Resolved Issues

Learn about the issues fixed in this release for MX Series routers.

For the most complete and latest information about known Junos OS defects, use the Juniper Networks online Junos Problem Report Search application.

Class of Service (CoS)

  • Multiple adjacencies may get dropped over AE interfaces PR1828018

  • FC id goes out of sync between the RE and PFE impacting all CoS features using FC id PR1836528

EVPN

  • MHPE sets as I_ESI instead of RNVE in EVPN-VXLAN configurations without the DCI interconnect configuration. Receiver sees traffic hop between source-VLAN and SBD PR1799761

  • VXLAN/EVPN ip-address for mac-address in forwarding table in hold state PR1802464

  • The MAC pinning functionality is not working on QFX platforms PR1806416

  • The VXLAN traffic drop could be seen after modifying control-word in an EVPN instance PR1807084

  • The rpd process will crash when TTE is enabled with EVPN-VPWS or EVPN-ELAN configured PR1808180

  • EVPN over MPLS IPv6/SRv6: PMSI attribute carrying wrong flags with value 0x20 (bit 2). PR1814525

  • Continuous kernel log messages are observed once the EVPN-VXLAN fabric is up PR1826772

  • GBP tags remain in place even after GBP tag assignment firewall filter is removed or deletion of mac-ip entry on specific Junos EX and QFX platforms with EVPN-VXLAN PR1830126

  • [EVPN] The one of routing-instances configuration changing affects whole LACP state under "lacp-oos-on-ndf"(LACP out-of-sync) and EVPN "single-active" conditions. PR1832785

  • RPD restart immediately on EVPN Designated Forwarder PE with Graceful-restart results in 100% traffic loss for 12-15 secs PR1846096

Flow-based and Packet-based Processing

  • Junos OS: SRX4600, SRX5000 Series: TCP packets with SYN/FIN or SYN/RST are transferred after enabling no-syn-check with Express Path (CVE-2024-39561) PR1776940

  • On SRX Series devices, when using IPv6 Multi-path BGP with MX configured with EVPN, transit SFW traffic experiences packet drops during IPv6 Neighbor discovery refresh. PR1817211

  • Junos OS: SRX4600 and SRX5000 Series: Sequence of specific PIM packets causes a flowd crash (CVE-2024-47503) PR1820291

Forwarding and Sampling

  • Wedge condition is seen on MX platforms with MPC10/MPC11/JNP10K-LC9600 and MX304 platform switch port utilization is above 80% PR1800623

  • Empty commit is behaving as commit full after the system was upgraded PR1818988

  • A BFD flap and subsequent impact in the traffic is seen when BGP FlowSpec session goes down or withdrawal of all BGP FlowSpec routes making entries on netflow.0 table to zero at once PR1827439

General Routing

  • The TSC_DEADLINE disabled error logs are observed on Junos vmhost platforms after upgrade PR1608045

  • Multiple J-UKERN core files might be generated during the sanity test PR1641517

  • On MX10004/MX10008/MX10016 chassis running Junos LC480 may reboot when "show system firmware" CLI command is executed to get the firmware information PR1696186

  • Observing core with rpd with BGP flowspec if secondary-independent-resolution is configured PR1722715

  • JDI-RCT:M/Mx: SMPC crash @ hostif_clear_toe_interrupts, toe_interrupt_handler after fpc restart scenario . PR1733053

  • On MPC10E after frequent interface flaps, interface does not come up PR1735539

  • with BGP sharding , observed memory leak in cookie ifx_dist_msg PR1761238

  • Junos OS: Due to a race condition AgentD process causes a memory corruption and FPC reset (CVE-2024-47494) PR1769294

  • The max allocated power numbers are lower than the recommended values PR1770642

  • Temporary traffic flooding when root port flaps in all flavours of STP PR1775171

  • FPC gets stuck at 100% utilization after upgrade from 21.2R1 or below to 21.3R1 or higher release PR1777139

  • EX4100 - JUNOS High CPU due to L2ALD PR1780149

  • Subscribers wont't be able to login when a new VLAN range is added under dynamic profile PR1782374

  • The mspmand process might crash on the MS-MPC during deletion of service-sets configuration PR1783745

  • Dvaita GNF with MPC11 card Jvision stats exported has wrong system id. PR1784806

  • Redundancy Support for New Consumer Services / BNG Licensing on Junos OS MX Series platforms. PR1787234

  • Traffic drop due to mac-validate failure on MX Series platforms. PR1788669

  • An enhancement to modify the output and alarm when an interface is down due to XCVR over temperature PR1789622

  • Configuring multiple IFL of different families on Junos QFX10K SP style interfaces leads to traffic loss PR1792128

  • Interfaces down with LOCAL-FAULT alarm after power cycle PR1793137

  • CMErrors are observed on MX platforms running MPC10/MPC11 causing the PFE to be disabled PR1793375

  • NSD coredump is seen on MX Virtual-Chassis every time when MXVC reboot if [service-set() flow-log] is configured PR1793765

  • Traffic impact during ISSU across FPCs on Junos MX platforms PR1796770

  • We may observe repd core (in the "from" release) during ISSU. There are no functional impact due to this repd core PR1797189

  • The system goes into a bad state when an SFB ungraceful offline happens due to a fatal Interrupt PR1798780

  • VNF OVS Interface failure with high memory PR1799045

  • The "show chassis synchronization clock-module | display xml validate" get "INVALID" output PR1799397

  • Traffic loss observed when we configure more then 256 terms in Fast-lookup-filter PR1799457

  • Traffic impact on SPC3-PIC due to high throughput and bursty traffic PR1799512

  • jti/plugin: The certificate of existing junos plugin pkgs (foo_plugin and bar_plugin) are expired and need the new ones PR1800642

  • xSTP does not work in ephemeral-db mode on all Junos OS Evolved platforms after the l2cpd restart PR1800645

  • On Junos platforms the telemetry subscribe to path": "/components/component[name='Routing Engine0']/state/memory/utilized is not working as expected PR1800754

  • PEM1 alert is going to clear immediately, and alarm LED was not lit after the power cable/PEM was removed. PR1800855

  • Traffic drop is observed when an SP style port is added to an existing vlan lag interface PR1801217

  • The RE switchover will not be triggered in case of clock failure on SCBE3-MX PR1801284

  • Crash files are generated every 24 hours due to a pkid process crash PR1801377

  • Memory Leak in the rpd Process During Protocol Deactivation/Activation PR1801382

  • SFB PCIE switch temp sensors yellow alarm falsely reported at high altitude and high temp operating conditions PR1801778

  • Parameters on xSTP interface were not as expected after switchover PR1801786

  • The optics temperature sensor name renamed from 'et-x/y/z' to 'xcvr-x/y/z' PR1802195

  • Interim logs for deterministic NAT are not generated as per the modified time interval PR1802242

  • AFTD crash may be observed when a MAJOR CMERROR that affects only one of the slice of a multi-slice PFE is triggered PR1802243

  • SFB ungraceful offline followed by master SPMB reboot results in traffic drops due to fabric Link errors PR1802259

  • Filter will be configured with incorrect vlan-IDs and commit error will not be displayed PR1802362

  • PTX10008 - Recurring logs -ppcfpc-multi-svcs.elf: FDB :: Ipv4 route operation 2 failed. Rt_index 1801 PR1803542

  • MPLSoUDP route issue preventing LSP establishment PR1803578

  • Traffic loss is observed along with error messages on Junos MX platforms with MPC1 to MPC9, LC2101, LC480 (including MX10003) during any transport LSP change operation PR1804263

  • The rpd process crash can be seen in restoration to baseline configuration in scaled scenario PR1804363

  • NSD validation failure results into upgrade failure for Junos MX platforms PR1804616

  • The dcpfe process will crash in an EVPN-VxLAN scenario due to stale entries in PFE PR1804628

  • The rpd process crashes during rpd restart on Junos and Junos Evolved platforms PR1805427

  • Return Error for unsupported options with GNMI RPCs PR1805445

  • show snmp mib walk jnxFruTemp is NOT correctly updated for PEM components PR1805483

  • Telemetry stats for af interfaces are not getting streamed for UKERN based Linecard PR1805769

  • Interfaces fail to coming up on ACX EVO platforms after deleting the routing-instance with DHCPv6 and adding new configuration on same interface PR1806148

  • Chassis not recovering clock from GM, but still advertisement of GM provided clock-class to downstream node PR1806526

  • MX platforms with with MPC10,MPC11,LC9600 and MX304 we observe IPv6 unilist next-hops are missing PR1806717

  • Partial traffic blackhole will be observed during the time of FPC crash due to interfaces not going down PR1806787

  • SFB power off/unplug followed by ungraceful SPMB restart leads to SPMB crash PR1807410

  • Unexpected traffic drop while removing BGP flowspec v4 and v6 in one commit PR1807693

  • MX platforms with some MPCs could run into cm_error during ungraceful SIB or Peer-FPC power off event or due to bad fabric links PR1807812

  • A route stuck in (Delete Hidden Ext) state forever due to BMP. PR1807892

  • [MX] daemon.err rshd[618008]: Second port outside reserved range. PR1807939

  • The IPsec tunnel traffic is dropped after ipsec tunnel soft reset on MX platforms PR1808207

  • Openconfig data type value is streaming in gnmi update as float_val instead of bytes_val PR1808259

  • CPU utilization of the rpd process stays high on all Junos and Junos OS Evolved platforms PR1808463

  • The error message "sysctl kern.corefile not supported" is seen for multiple daemons during daemon initialisation PR1808481

  • Traffic loss occurs if persistent link error is seen on a fabric plane to PFE, after restarting or rebooting another FPC in a different slot PR1808923

  • On Junos MX204 platform and platforms with MPC7E/8E/9E, JNP10K-LC2101, JNP10003-LC2103, JNP10K-LC480 line cards, the interface goes down when re-initialisation issue occurs, causing 'Avago SERDES' EA (Eagle ASIC) chip crash PR1809306

  • Ethernet interfaces configured with loopback option remains down after multiple iteration of line card boot is performed PR1809511

  • FPC crash due to race condition on MX platforms with LC480 PR1809644

  • The l2ald core is observed due to stale IFD entry PR1810013

  • Error messages "dot1xd[xxxx]: %DAEMON-3-DOT1XD_MACSEC_GENCFG_ERROR: rtslib_gencfg operation failed ifd" seen after GRES PR1810563

  • The rpd crash is observed due to the segmentation fault on Junos OS Evolved platforms PR1810866

  • The rpd process crashes if the configuration changes rapidly when Tactical TE is enabled PR1811005

  • PRPD flex routes with a translation tunnel (IPv4 to IPv6) type are not programmed if statistics is enabled. PR1811259

  • In Junos MX platforms specifically MX2010 and MX2020 with SFB2 Fabric installed replacing MPC9E linecards with MPC6E linecards results in all SFB2 fabric get into check state and FPCs becomes destination error and offline PR1811474

  • Intermittent SFB I2C failure Alarm and Alarm cleared after 3 polls of 5 seconds due to ZF0 VDD 0.75V intermittent access failure PR1811485

  • XSTP reconverges after GRES (Graceful routing-engine switchover) with NSB (nonstop bridging) enabled if l2cpd in master is restarted before switchover PR1811511

  • The LLDP neighborship does not recover on aggregated Ethernet interfaces. PR1811545

  • ARP and ND entries are not in sync across the EVPN-VXLAN peers which leads to traffic drops PR1811556

  • The process bbe-smgd crash will be observed in the Subscriber login/logout scenario PR1811787

  • The rpd process crash is observed when there are catastrophic changes under the particular routing instance configuration PR1812009

  • On MX2K, offline manually SFB2 or SFB3 or Plane to recover from a fabric link training failure, fabric mananger is not able to turn off the fabric links on a neighbor slot FPC PR1812046

  • Persistent link error in one fabric plane towards some PFE could causes traffic blackholing from non-native LC PFE towards that remote PFE over all fabric planes PR1812276

  • Persistent MAC getting stuck in the SRP state results in traffic loss in the EVPN-VxLAN scenario PR1812482

  • PFCP Association stuck in disconnecting state for BNG CUPs platforms PR1812890

  • Memory issue seen with syslog/log in firewall terms PR1813253

  • Extensible Subscriber Services Manager (ESSM) sessions gets disconnected when PFE encounters an issue for any service or subscriber session PR1814017

  • 'show system subscriber-management route summary' displays a negative gateway route count in the new master RE after UP-GRES PR1814125

  • L2BSA sessions remain down when port messages from ANCP neighbor are dropped in a scaled scenario after ISSU followed by GRES PR1814300

  • The dot1x authentication fails for VoIP traffic PR1814502

  • Faulty MPC8 or MPC9 line cards can lead to spontaneous chassisd crash on certain Junos MX platforms PR1814801

  • jnxSpSvcSetIfMemoryZone SNMP mib always returns 0 for service-set memory usage zone PR1814935

  • JDI-RCT:M/Mx: after unsupported card is offlined during ISSU validation in MX router, fabric planes are stuck in check state PR1815125

  • Premature graceful RE switchover causes traffic blackhole during software upgrade on PTX platforms with dual RE PR1815152

  • The collector will see duplicate entries during the init sync of gNMI subscription on Junos and Junos Evolved platforms PR1815195

  • The bbe-smgd crash is seen on MX platforms PR1815502

  • Junos OS: SRX Series: Low privileged user able to access sensitive information on file system (CVE-2024-39527) PR1815751

  • MAC addresses learnt on interfaces part of VLAN with MAC limiting by interface and "drop-and-log" action configured are cleared after VLAN description is changed PR1816049

  • PFE core is observed due to PCIE link was down PR1816148

  • XQSS_CMERROR errors will be seen which might disable PFE PR1816378

  • JNP10K-LC480 Linecard fails to come online after restart due to CM Errors PR1816506

  • Traffic blackholing will be observed in the l2circuit scenario when a non-active path is shut or disabled PR1816807

  • IIC access error during commit operation cause false positive alarms in devices PR1816912

  • Product annotation is missing for sensors on the MX, PTX, and EX92XX platforms PR1817967

  • On Junos OS Evolved platforms, any new L2 functionality doesn't work when ELP configuration is not present on the connected device(s) PR1818022

  • [LC480] STS LED may display incorrectly PR1818475

  • Fan Tray Outer Fan running at over speed alarm is reporting after upgrade PR1818517

  • Multiple BBE daemons getting killed automatically on MX platforms PR1818781

  • The preserve-nexthop-hierarchy configuration configured with VPLS , brings down the Layer 3 protocol sessions running over the IRB interface PR1818978

  • SRv6 to SRMPLS tunnel config changes cause rpd restart PR1819019

  • The SNMP jnxFruRemoval/insertion trap OID is not being sent correctly when the FTC module or the fan tray module is inserted or removed PR1819263

  • BMP gets stuck and does not send data to BMP collector PR1819305

  • Switch port status is changed to unauthorized, when a supplicant client attempts to authenticate using 802.1X standard with EAP-TLS certificate PR1819462

  • Multiple processes on both the REs are crashing. PR1820001

  • The JTI/UDP export format prompts "gpb-sdm" as a possible completion on executing set services analytics export-profile (profile name) format gpb-? command. PR1820510

  • Commit check does not display error while configuring format gpb-gnmi and transport udp for export-profile in Telemetry. PR1820774

  • Traffic drop is seen in an EVPN multihoming scenario when mac-pinning is enabled. PR1820882

  • The bbe-smgd daemon memory leak will be seen when ACI VLAN parsing fails. PR1821021

  • The RADIUS attribute NAS-Port-Type is missing from Access-Request packets. PR1822101

  • The PFE becomes inactive or disabled when running multicast in a video monitoring setup. PR1822738

  • Few flows for BUM traffic gets dropped when a mix of MPC1-9 and MPC10 and above is used. PR1822793

  • Aggregated ethernet interface flaps can be seen when IRB interface is activated or deactivated. PR1822911

  • Authentication failure will be seen for routing protocols when MD5 is configured for routing protocols and PCEP on Junos OS Evolved platforms post reboot. PR1823220

  • Interface will flap immediately on MX platform with MPC2 or MPC3 after FPC restart or router boot up. PR1823373

  • Licensing usage is not set post reboot until there is an empty commit is done. PR1823449

  • The jnxSubscriberPortTerminatedCounter shows incorrect values for interfaces. PR1824274

  • New threshold values are set as LC4800 is not NEBS acoustic compliance. PR1824343

  • The traffic is getting duplicated when VPLS to EVPN transition is performed. PR1824739

  • On MX304 DHCP Vlan Creation Fails for EVPN VPWS when PIC0 is not installed. PR1825417

  • The rpd crash is observed during upgrade or restart. PR1826194

  • The error messages will be observed while configuring native sensor paths. PR1826196

  • The subscribers get stuck post GRES switchover. PR1826324

  • Even though installed the license to both primary and backup, Alarm LED might be lit with yellow on backup. PR1827641

  • The pfemand crash will be observed when clear bgp neighbor all command is executed. PR1828017

  • Potential Traffic will be seen on GRES/L2ALD Restart/GR due to Shadow INH Change. PR1828519

  • In high-scale, high-load environments, the l2ald process might experience hangs during Apstra polling. PR1828741

  • Inline NPTv6 is not working on classic firewall filters leading to packet processing errors. PR1828985

  • The flowd process crashes in scaled scenario when subscribers exceed maximum session limit for NAPT44 on MX platforms with MX-SPC3. PR1829633

  • Sourceport-ID comparison resulting in higher value for MPC7E compared to MPC5E for distributed PTP architecture. PR1830281

  • Commit error on using more than 31 characters authentication-key-chain-name. PR1830395

  • On Junos MX2020 platform with non-native LC, HSL2 'failed word alignment' error causes the fabric planes to go in check state. PR1830457

  • The dcpfe crashes when ukern_trace handle buffer size is set to 10000. PR1830575

  • FPC crash will occur when modifying or deleting a filter instance on Junos platforms. PR1830706

  • Multiple flaps on BGP routes causing traffic sliently drops. PR1831421

  • Telemetry streaming will not happen because the resource path is not valid. PR1831841

  • The soft minor alarm 'QoS License(289) usage requires a license' is raised on the device. PR1832769

  • Configuration Archival does not work using SFTP when using the mgmt_junos routing-instance on ACX5448. PR1833705

  • The flowd process crash during TCP Packet Processing. PR1834248

  • The RPD crashes after executing show krt error-statistics errorno X. PR1834859

  • Fabric plane goes into check state and alarm is consistently seen along with traffic drop when ADC based line cards are restarted on certain MX platforms. PR1835860

  • Subscriber's session created using the dynamic profile leads to rpd crash. PR1838354

  • Traffic loss due to tunnel establishment failure in HA setup. PR1839090

  • The Subscriber Sessions will stuck in the terminated state and the final accounting will be delayed PR1839200

  • BMP soft assert due to counter reset by clear command PR1839288

  • After performing ISSU on SRX4600, the SPM is no longer operational PR1839346

  • RLT ifl remains down after RLT unit interface configuration is modified PR1840734

  • PCP mapping fails for specific internal IPv4 addresses in DS-lite scenario PR1841231

  • ISSU fail for the MPC2E/3E NG FPC result in FPC crash PR1841400

  • Due to high bursty traffic, PIC on MX-SPC3 might go down. PR1841859

  • An Enhancement to 'show ancp subscriber detail' command to display port-up/down timestamp and port-down cause PR1841954

  • Unable to console to VNF using a non-root user from Juniper Device Manager PR1842451

  • CFM session flaps continuously upon committing CFM inline mode and CFM sessions related configuration together PR1842542

  • Inline IPsec tunnel traffic forwarding stops when destination IP prefix is moved from user-defined VRF (Virtual routing and forwarding) to default VRF or from default VRF to user-defined VRF PR1843098

  • Traffic blockage observed with SFP-100BASE-BX10 optics in EX4400-48F PR1843585

  • vlan tagging in Q-in-Q is not handled correctly over EVPN-VxLAN PR1843817

  • Memory leak is seen with rpd task blocks "nhlib_nexthops_004" PR1844160

  • Stale MAC-IP entries are not cleared in an EVPN-VXLAN scenario when encapsulate-inner-vlan or decapsulate-accept-inner-vlan or both knobs are present PR1844623

  • High heap memory caused MX-SPC3 PIC to go offline PR1844731

  • Packet duplication and flooding issues are seen when vpls bridge domain is configured on an aggregated Ethernet and label-switched interface across multiple line cards. PR1850604

  • Unnecessary trace log files related to licenses are generated PR1845079

  • Memory leaks are seen in bbe-statsd process. PR1852532

  • Interface not added back to AE bundle with multiple changes in single commit PR1845370

  • Incorrect warning message is seen post hyper-mode config change and mismatch of hyper-mode between FPC and RE impacts performance PR1845497

  • Some ports take longer than others to come back online when multiple ports experience simultaneous flap PR1847378

  • Core being generated for some processes while using license feature PR1848160

  • Routing-services enabled on PPPoE dynamic profile causes subscriber login failure for new subscribers PR1848887

  • Configuring BGP rib-sharding and generate route will cause rpd process to crash PR1848971

  • The bbe-statsd process crash due to malformed PFE packets PR1849377

  • FPC crash upon change of tunnel-services bandwidth PR1849552

  • PR 1850604

    Packet duplication and flooding issues are seen when vpls bridge domain is configured on an aggregated Ethernet and label-switched interface across multiple line cards. PR1850604

  • When BGP RIB Sharding is enabled, new BGP group/peer added gets stuck at Flags: (Sync InboundConvergencePending) PR1850620

  • EVPN protocol configuration through CLI is not allowed on device PR1852905

  • Router flag is not getting set in Neighbor Advertisement message PR1853868

  • Devices fail to obtain an IP address when DHCP Security Option 82 is enabled. PR1854253

  • IPv4 Frameroutes with prefix length of less than /32 do not get applied. PR1855891

  • On MPC10/11, the traffic coming from any physical interface belonging to these MPCs will always take a fabric hop before forwarding to any physical link in egress. As a result despite locality bias feature being configured, the input traffic on that physical interface will still end up showing increase in the fabric statistics count. PR1857225

High Availability (HA) and Resiliency

  • OSPF neighbours go down due to link flapping after NSR switchover on Junos OS Evolved platforms with IPSEC configuration PR1848313

Infrastructure

  • Core dump capture failure during PeerStruck verification at medium threshold PR1816376

Interfaces and Chassis

  • The LFM session flaps will be observed at random PR1811734

  • After Routing Engine switchover the VRRP master and backup router will start functioning as master routers PR1822867

  • The jpppd process will crash when subscribers frequently login and logout. PR1854387

Intrusion Detection and Prevention (IDP)

  • Not able to update IDP signature DB when using Proxy server PR1822319

  • Memory leak will be observed on all SRX platforms when IDP is configured PR1826377

J-Web

  • Unable to load J-Web after upgrading SRX when time zone is set to GMT+x or GMT-x. PR1851362

Layer 2 Features

  • VPLS traffic will be impacted when routing-engine switchover happens due to master routing-engine reboot in NSR scenario PR1793342

  • RPD process terminates abnormally on MX480/MX10008 platforms by misconfiguration involving both BGP VPLS and LDP VPLS PR1813574

Layer 2 Ethernet Services

  • After L2 failover, client receives DHCP attributes from the main pool configured instead of the linked pool and linked address-assignment pool name is not synced to DHCP binding on backup BNG having ALQ in BBE subscriber management scenario PR1799888

  • The client session is logging out as DHCP renewal is not successful PR1801142

  • jdhcpd cores when 'show dhcpv6 server binding' command is executed PR1816995

  • DHCP asymmetric-lease-time is slow processing large scale requests to terminate 64K subscribers. PR1817227

  • jdhcpd core dumps may be seen on ALQ setups when subscriber synchronization is done PR1818919

  • JUNOS_REG:EX4650-48Y:ZTPv6:Failed to reconnect to device as unable to load configuration to device via shelscript from ztp server PR1822178

  • DHCP ALQ process crashes to recover from memory leak. PR1825998

  • DHCP relay option "allow-server-change" does not work as expected in trusted server group when roaming between access points PR1833148

  • DHCPv6 BLQ not working as expected PR1839348

MPLS

  • The rpd process crashes with LDP entropy-label policy configuration with "from instance (routing-instance-name)" PR1812545

  • LSP keep retrying over the transit router marked as "overload" resulting in traffic drops or using the suboptimal path for the LSP PR1814358

  • MPLS LDP sessions are not established when container-lsp is configured with an already existing lsp-template PR1817712

  • LSP re-optimization issue has been observed PR1819948

  • The detour path is not coming up when the detour hop limit is set to 255 PR1820893

  • Bypass re-optimisation not taking SRLG or fate-sharing into account when protected link is down PR1823215

  • Detours not coming up when link-protection is turned-off while interoperating with ZTE device PR1833448

  • In a scenario involving NG-MVPN and point-to-multipoint LDP LSP the LDP point-to-multipoint FEC may remain in an inactive state on the PE after uplink interfaces flap PR1835938

  • mgd timeout communicating with routing daemon rpd for 30 minutes during RSVP MBB event PR1837770

  • The rpd crash is observed when "expand-loose-hop" knob is configured and rpd is undergoing graceful restart PR1840543

  • RSVP authentication check fails if the length of the authentication-key is sixteen characters PR1850130

  • Traffic loss will be observed when container-LSP with in-place-lsp-bandwidth-update configured. PR1857867

Network Address Translation (NAT)

  • Commit error is observed on Junos platforms with MS-MPC or SPC3 when last octet of source-ip of jflow-log collector is above 223 PR1817417

Network Management and Monitoring

  • The lo0 interface entries are missing from Junos 'ipNetToPhysicalTable' walk output PR1807176

  • The "snmp packet-size (size)" command not working for SNMPv3 PR1817865

Platform and Infrastructure

  • IP routes can get added to a deleted routing table PR1801129

  • Multiple Products: RADIUS protocol susceptible to forgery attacks (Blast-RADIUS) (CVE-2024-3596) PR1802329

  • 500 concurrent probes supported on Junos TVP platforms instead of standard 2000 probes for other Junos Platforms PR1808361

  • Few error messages will be seen while deleting multiple EVPN Routing Instances. PR1808643

  • Traffic drop is observed after any add/change/delete event on IRB interfaces inside a VPLS deployment PR1814521

  • Console login fails when authentication-order is configured under 'system services' hierarchy on all Junos platforms PR1826666

  • An authentication failure occurs when the TACACS+ server detects an error in sending authentication response PR1829031

  • Traffic drops after link flap on active-active ESI setup with MAC pinning enabled PR1846365

Routing Policy and Firewall Filters

  • Performance degrades when learning BGP routes with communities PR1795263

  • OSPF neighbourship with IPsec authentication goes down after RE switchover PR1807830

  • Firewalld process crashes when port range optimization parameter is configured with a value greater than 255 PR1815533

  • Commit delay will be observed when the configuration is changed for the logical system PR1832853

  • Static route validation fails when using an interface-route leaked with rib-groups using to rib as matching condition under rib-groups import-policy. PR1849500

Routing Protocols

  • Memory leak in rpd due to deactivation and activation of routing-instances, interfaces and protocols PR1761191

  • Leaked routes via BGP rib-group remains in hidden state even though "loops" is configured with any value greater than one PR1771344

  • BGP OutQ counter of one of the BGP peers gets stuck after system reboot/restart routing/clear bgp neighbor PR1788543

  • BGP routes may not get advertised when always-wait-for-krt-drain is configured with BGP sharding PR1793714

  • Junos OS and Junos OS Evolved: Receipt of a large RPKI-RTR PDU packet can cause rpd to crash (CVE-2024-39543) PR1803120

  • The CLI "show igmp snooping membership" does not list "instance" in its option PR1804715

  • Junos OS and Junos OS Evolved: On SRv6 enabled devices, an attacker sending a malformed BGP update can cause the rpd to crash (CVE-2025-21593) PR1806694

  • BGP backup routes are installed as primary routes after enabling 'protect core' feature PR1807037

  • Interface and protocol flaps is observed when BFD authentication is enabled PR1807182

  • BGP multipath selects wrong interface with "Multiple Single-Hop EBGP sessions on different links using the same IPv6 Link-Local Address" PR1807504

  • Junos OS and Junos OS Evolved: When BGP traceoptions is enabled, receipt of specially crafted BGP packet causes RPD crash (CVE-2024-39525) PR1807533

  • The rpd crash is observed for the leaked ISIS SRv6 locator route holding a stale pointer PR1808185

  • BGP routes with next hops as link-local address are not installed PR1810617

  • An interface with a lower MTU size is causing a rpd crash PR1810993

  • Improper maximum value for limit-bandwidth of policy-statement PR1811862

  • The rpd process crash is observed when the label received exceeds the configured maximum-labels 16 PR1812124

  • The rpd process crash is observed when policy condition is applied to the route with a next-hop interface having nonzero logical unit PR1812844

  • No new MoFRR back up path selected after changing the metric of back up PR1812857

  • "snmp-options backward-traps-only-from-established" for logical-system doesn't work properly. PR1813048

  • Local repair does not happen if BFD is configured on MX platforms with MPC7E line card PR1813841

  • Incorrect counting of vrf-scale numbers for license warnings will be seen on all platforms PR1814012

  • Junos OS and Junos OS Evolved: With BGP traceoptions enabled, receipt of specifically malformed BGP update causes RPD crash (CVE-2024-39515) PR1814083

  • Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash (CVE-2024-39516) PR1815222

  • Junos OS: Multiple vulnerabilities resolved in OpenSSL (CVE-2024-4741, CVE-2024-2511) PR1815253

  • The rpd crashes when stale label entry keeps increasing when knob stale-labels-holddown-period is configured PR1817834

  • BGP-LU Label is incorrect after convergence PR1818545

  • PIM Prune is not sent to upstream PR1819741

  • Junos OS and Junos OS Evolved: When BGP traceoptions are configured, receipt of malformed BGP packets causes RPD to crash (CVE-2025-21598) PR1821241

  • Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash (CVE-2025-21600) PR1823612

  • Unexpected behaviour after BGP sessions reset for catastrophic BGP configuration changes PR1826685

  • Traffic impact due to BGP route stuck in hidden state PR1826686

  • OSPF LSA flooding is impacted after database recovers from 'ignore' state when 'database-protection' is triggered PR1827435

  • Memory leak can observed in SRv6 setup with TILFA enabled for SRv6 PR1828209

  • Junos OS and Junos OS Evolved: Receipt of specially crafted BGP update packet causes RPD crash (CVE-2025-21602) PR1828380

  • ISIS adjacency part of an igp-instance gets stuck in 'Initializing' state after the rpd restart PR1830989

  • The 'overload advertise-high-metrics' does not work after the graceful restart for ISIS PR1837289

  • BGP import policy does not process the next-hop statement PR1839318

  • Configuration check-out fails when applying "inet6.0 static route" with qualified-next-hop and interface settings PR1839631

  • The rpd crash after enabling ISIS with authentication keychain PR1839917

  • Traffic drop is seen after GRES on ISIS peer PR1841108

  • RPD process crash observed with dynamic tunnel configuration with overlap in destination networks under APP based and NHB mode and rollback PR1842654

  • MVPN traffic does not recover after clearing forwarding-cache PR1845087

  • BGP stops advertising VPN routes to EBGP peer if static route-target-filter as local is configured PR1845169

  • The S-BFD responder session cannot be distributed to PFE and failing S-BFD session to establish PR1846448

Services Applications

  • Radius-flow-tap Lawful Intercept DTCP ADD request is not accepting port ID and constantly using port 47355. PR1839617

Subscriber Access Management

  • Address preservation for delegated prefixes does not work for subscribers in VRF PR1777967

  • authd process crashes when radius-server-name is configured PR1818321

  • The authd process crash is seen when subscriber management is enabled PR1826901

User Interface and Configuration

  • XML namespace string in rpc-reply tag for system-uptime-information was changed to represent the full version name. PR1842868

VPNs

  • MPLS LSP tied to an l2circuit is not honoring the configured transport class PR1834625