ON THIS PAGE
Resolved Issues
Learn about the issues fixed in this release for MX Series routers.
For the most complete and latest information about known Junos OS defects, use the Juniper Networks online Junos Problem Report Search application.
General Routing
-
NETCONF: RPC get & get-configuration display invalid json format response for an OpenConfig when adds a routing-options configuration. PR1663426
-
The rpd process crashes when processing multipath routes with mixed indirect and composite next-hops under rib-sharding. PR1757915
-
Incorrect speed assigned to 1G interfaces on MPC2E-3D-NG high-capacity line card modules. PR1824215
-
CTRL FPGA Version Check for MX10K-LC480. PR1846388
-
Misleading warning when trying to zeroize just one RE on a dual RE device. PR1846914
-
Loss of synchronization are observed when SyncE/PTP configurations are changed. PR1848235
-
Deprecate a few sensor paths that are not OpenConfig compliant. PR1858680
-
PPPoE subscriber login fails over PS interface when frame size is below 64 bytes. PR1858693
-
When rib-sharding or update-threading are enabled, generated bgp traceoptions files become accessible only to root users. PR1860792
-
VPLS session stays down after interface flaps. PR1866522
-
On MX Platforms, FRU Insertion/Removal Traps for Fan are not generated. PR1866649
-
L2ald memory usage increased up to100MB. PR1867811
-
Subscribers failed to establish DS-Lite softwires due to stale softwire entries. PR1869450
-
CUPS-L2-Regression: dbng_single_up_igmp_mld_mts_part1_mts.robot fails in teardown with error no response from radius server. PR1871403
-
SyncE clock event stuck at "Clock abort" and PTP stops working on all Junos and Junos OS Evolved platforms. PR1872093
-
The SPC3 card resets due to kernel memory exhaustion in MX Series platforms with highly scaled routing tables and Inline Active Flow Monitoring configured. PR1873938
-
Intermittent link-up failure on MX10003 after peer device reboot. PR1876314
-
Wrong digest algorithm is used for ECDSA key based certificate requests using PKI. PR1876497
-
1PPS measurement failed for class-B over 100GE to 100GE port combinations using SR4 optics. PR1878254
-
Post Upgrade Junos no longer shows logical system name on show commands followed by logical-system all. PR1879698
-
GNFs in Junos Node Slicing will stop responding when both REs are rebooted at the same time and master RE fails to recover. PR1880218
-
FPC crash is seen on MX series when disabling AE IFL in mixed-speed configuration without enhanced-ip enabled. PR1880860
-
The rpd crash would be observed when two separate next-hops in rpd map to the same next-hop-index in the kernel. PR1881012
-
NAT Pool Installation failure due to Service-Set name length mismatch. PR1881192
-
MPC10E: Huge 1PPS error is seen for 15 to 20 minutes with SCB3E post DUT in phase aligned state. PR1881618
-
BFD fail to establish over an IPsec tunnel on Juniper MX Series with the SPC3. PR1882490
-
EVPN-MPLS BUM Traffic Disruption Due to Incorrect QinQ STag Insertion. PR1882561
-
The debug-collection fails due to insufficient space. PR1883317
-
MIC details not polling when SNMP MIB walk is performed after Junos OS upgrade. PR1884816
-
AE interface going down on specific MX platform with exclude-protocol being re-configured under MACsec. PR1885185
-
TTE miscalculates bandwidth on AE interfaces due to zero negotiated bandwidth. PR1885563
-
"jnh_tunnel_encap_helper(xxxx): Unsupported next header:xx" error messages are reported on specific MX platforms with RE-based sampling configuration. PR1885608
-
The aaasd process stops responding for RPC calls. PR1885622
-
MX304 LNS: FPC restart and aft-trio core after LMIC OIR when SI pool spans both MICs. PR1885754
-
Few telemetry paths are not exported after router reboot. PR1886043
-
debug_collector: support multiple modes data collection. PR1886371
-
FPC crash is seen on Junos platforms in a rare scenario. PR1886395
-
Alarms for high usage in /var partition are not generated. PR1886757
-
Incorrect tunnel and SA count display due to simultaneous IKEv1 quick mode negotiation. PR1886887
-
The snmp mib walk DomCurrentLaneAlarms does not show proper lanes Values in the latest builds. PR1886889
-
Interfaces either fail to come up or flap or a delay is observed on MX10003 platforms when the interface is reset or the devices is restarted. PR1886937
-
Optics fail to come up post reboot. PR1887528
-
Packet loss observed with SFP-T modules on MX10K LC480 line cards due to IPG misalignment. PR1887864
-
Incorrect uSID handling in SRv6-TE will impact the traffic path. PR1887866
-
Change in the behaviour of configured lifesize kilobytes of ipsec proposal. PR1888205
-
Traffic drop is observed in an EVPN multihoming as the MAC route points to the ESI interface when the CE (ESI) IFD flaps. PR1889335
-
DHCP clients do not come up when VRF leak and "dhcp-relay" with "no-snoop" are configured under a routing-instance. PR1889637
-
Data still seems to be streaming somewhere when the DialOut (Established) connection on the port is already closed. PR1889924
-
BNG CUPS Controller will not deploy on a Multi-Geo RHOCP Multicluster. PR1890548
-
Enable high-power optics on all ports, limited to a maximum of 32 high-power modules. PR1890645
-
SFB is stuck in CMTY_SFB_STATE_OFFLINE_ACK_WAIT state and does not come offline or online. PR1891047
-
A GRE tunnel configured with a tunnel key drops MPLS-encapsulated traffic. PR1891110
-
Clear security log reports with time interval support. PR1892154
-
Adding a new key to authentication-key-chain causes kernel crash. PR1895827
-
MX[10008, 304] Marvell Phy: MACSEC:TRD: With should-secure enabled and IFL interface configured with IFD level MACsec, ping is not working. PR1896363
-
Junos OS and Junos OS Evolved: Use after free vulnerability In 802.1X authentication daemon can cause crash of the dot1xd process (CVE-2026-21908). PR1896371
-
SFP-T port will not come up after system restart. PR1896458
-
The transportd daemon which runs on Routing Engine cards generates core dump repeatedly after installing line cards or PICs are swapped for a different type. PR1896486
-
Incorrect ARP responses observed in BNG CUPS software versions. PR1897105
-
Traffic loss occurs with multiple VRRP instances using the same VRRP group ID and one of VRRP instance transitions backup. PR1897117
-
Chassis-Control restart triggers when configuring GRE interface across multiple routing-instances leading to kernel crash. PR1897240
-
ARP resolution and device discovery failure is observed due to unexpected VLAN tags on ARP replies. PR1897336
-
MPC10E: DPLL stuck in "holdover" and TOD update is incorrect over MPC10E FPC. PR1897460
-
Memory allocation failure in all the FPCs inside the NH partition. PR1897464
-
The craft-control process is unable to start on MX10004/MX10008 platforms. PR1898722
-
"gnsi_ssl_profiles" file is not getting synchronised between the routing engines. PR1898768
-
Timing defect in ukern thread handling causing LC reboot. PR1898825
-
The vMX line card is crashing due to internal debug logging issues. PR1898885
-
MAC learning failure when moving the AE interface from one VLAN to another VLAN in a single commit. PR1899530
-
Unexpected packet retransmissions and traffic drops observed on SFP-T interfaces on LC480 line cards. PR1899711
-
Service-Set Configuration Bug Leading to Kernel Panic on Junos MX. PR1901021
-
PFE Crash observed platforms where PKI and SSL-Proxy services are configured. PR1901098
-
After the deactivation of the PTP protocol in the G.8275.1 profile configuration, SyncE remained in Holdover mode. PR1902478
-
Intermittent kernel panic results in device reboot or fxpc crash. PR1902609
-
Deactivating or deleting
auto-configureknob in an interface is not working properly. PR1902855 -
Stale entry in MAC-IP table affects ARP resolution. PR1905196
-
Correct values of ACCTG-Terminate-cause are not getting populated in ACCTG-STOP message. PR1905612
-
FPC crash triggered when a line card reboots with a large number of static subscribers. PR1905768
-
The memory leak caused by using the "show ccl statistic summary ... " command. PR1905954
-
While collecting RSI, takes long time to produce output on MX platform. PR1906557
-
Link failure due to auto-negotiation state getting stuck on MX platforms having Junos OS. PR1906675
-
GNF will be in offline state and its mastership state is set to backup on both routing engines when RE is forced to boot from SSD2 or normal RE switchover on MX platforms. PR1906960
-
All Marvell(MX, ACX): LLDP protocol goes down when 'exclude protocol LLDP' is deleted from MACsec policy attached to IFD. PR1908196
-
RIB and the FIB inconsistency results in traffic loss in IPsec scenario with st0 interface configured. PR1908681
-
On all MX platforms chassid gets stuck and becomes unresponsive it resumes only after restarting both control units. PR1908719
-
Suppress humidity sensor CLI command and corresponding code in McLaren MX. PR1909435
-
EVPN traffic blackholing occurs when re-ARP uses VGA IP with IRB MAC in dual-homed LAG setups. PR1909786
-
SPC3 crashes when three-color policer is attached to firewall filter. PR1910534
-
MX10004 reports "Command to fetch fpc 0 ethernet switch firmware info failed" when running CLI commands tied to firmware. PR1910821
-
Show command execution failure for show system macsec license on MX platforms. PR1911538
-
(SPRING-TE Entropy-label is not supported for segment-list with single label for tunnel) is reported in messages logs even if the entropy label feature is not configured. PR1911821
-
The nsd process crash will be seen on MX platforms when configuration change is commited using ephemeral database. PR1912459
-
EVPN routes are stuck in the KRT queue. PR1913519
-
Traffic is not passing through GRE-over-GRE tunnel due to keepalive packets are dropped in the outer tunnel. PR1913870
-
On-change telemetry events dropped when l2ald telemetry queue memory limit is not configured. PR1914423
-
L2TP subscriber session failure in BNG CUPS scenario. PR1916030
-
Slow memory leak triggered by subscribing to the pipeline sensor for a long duration. PR1921361
-
FPC heap memory will be leaked when CCNHs are recreated due to VPLS PNH are getting deleted and re-added or next-hop is changed on BGP-LU LSP. PR1922741
Application Layer Gateways (ALGs)
-
Junos OS: MX Series with MX-SPC3 or MS-MPC: Receipt of multiple specific SIP messages results in flow management process crash (CVE-2026-21905). PR1876029
Class of Service (CoS)
-
Telemetry subscription to path /qos/interfaces/interface/output/queues/queue/state/transmit-pkts showing incorrect result. PR1858634
EVPN
-
The data plane will be out of sync when migrating to EVPN A/A stitching with Vanila VXLAN (PIM Multicast). PR1848993
-
The associated EVPN RI peers are not learning routes when there is change in EVPN RI name or EVPN RI is deleted and added back. PR1862755
-
Error message flood : task LIBL2 task client IPC./var/run/rpdf_control addr /var/run/rpdf_control: No such file or directory. PR1869558
-
The rpd EVPN module sends a redundant license message to the license infrastructure. PR1889092
-
EVPN routes take longer to install into the FIB after being learned through BGP. PR1893671
-
Inconsistency is observed between the ARP table learned on PE devices in EVPN-MPLS or EVPN-VXLAN Multihoming scenario. PR1894803
Flow-based and Packet-based Processing
Forwarding and Sampling
-
Filter name mapping error in routing instances with attached firewall filter. PR1889028
-
Memory leak in FPC during login/logout. PR1890097
-
Firewall filter not processing traffic with flex offset configuration is enabled. PR1901312
-
Intermittent traffic loss after pfe reset due to FLT filters. PR1903047
-
[MX10008] cmd='ls -i /var/etc/filters/filter-define.conf' is logged every 1 second instead of every 30 seconds. PR1903874
Interfaces and Chassis
-
Traffic drops due to VLAN configuration not updated for Ethernet-Switching Interfaces. PR1916208
J-Web
-
Junos OS: J-Web: Multiple vulnerabilities resolved in PHP software (CVE-2023-0567, CVE-2023-0662, CVE-2023-3823, CVE-2023-3824, CVE-2023-0568). PR1725808
Juniper Extension Toolkit (JET)
-
Removal of the suffix when the hostname is used as the target ID in the gRPC-tunnel configuration. PR1894461
Junos XML API and Scripting
Layer 2 Features
Layer 2 Ethernet Services
-
Junos OS and Junos OS Evolved: DHCP Option 82 messages from clients being passed unmodified to the DHCP server (CVE-2025-59960). PR1876407
-
Junos OS and Junos OS Evolved: Unix socket used to control the jdhcpd process is world-writable (CVE-2025-59961). PR1877468
-
On Junos devices supporting subscriber services acting as DHCPv6 relay randomly deletes IA_NA or IA_PD binding/route. PR1911001
MPLS
-
Traffic blackholing in LSPs due to link failure before protection signalling is processed. PR1866944
-
On rare circumstances the rpd process crash is seen in RSVP scenario. PR1871664
-
The memory leak in lsp_regex_cache_entry block (lsp_regex_cache_entry_add). PR1878360
-
BFD session failure causes LSP to go down and the inactive route remains in the routing table leads to traffic black hole. PR1881906
-
MPLS ping/trace not working for direct peers via routing-instance over MPLS protocols. PR1889546
-
Record Route Object displayed in show mpls lsp output is trucated if number of hops is sixteen or more. PR1893822
-
More bandwidth admitted onto a TE link when Label Switched Paths (LSPs) undergoing make-before-break re-route over the same link carrying the bypass LSP during local repair. PR1896022
-
Frequent link-protection flaps are observed for container LSP's with no change in member LSP. PR1908506
Network Address Translation (NAT)
-
SNMP walk timeout .PR1788400
Network Management and Monitoring
Platform and Infrastructure
-
TCP listening sockets are not displayed correctly. PR1864027
-
NTS for NTP not working even after the Ceritficate is validated with External servers like Chrony and NTPSec. PR1872704
-
Route for disabled fxp0 interface remains in PFE after re-enabling the interface. PR1874365
-
IPv6 default route gets deleted from FIB by slaac daemon after an upgrade with an unsupported configuration. PR1881956
-
Primary RE crashed and triggered unexpected switchover due to memory corruption. PR1893210
Routing Policy and Firewall Filters
-
MX-SPC3: While Downgrading from 25.4/24.4R2/25.2R2/25.3R1 image with address book IPV4 range config, image installation validation is failing. PR1899519
Routing Protocols
-
The rpd process will crash due to memory leak. PR1864676
-
MX960 mcsnoopd core dump during rt_mcnh_nh_release. PR1876458
-
The Aggregate-Bandwidth feature inconsistency on BGP Route Reflectors with VRF L3VPN Multipath. PR1877111
-
EBGP MULTIPATH is not set on ACTIVE route. PR1877332
-
Junos OS and Junos OS Evolved: BGP update with a set of specific attributes causes rpd crash (CVE-2025-60003). PR1878812
-
PIM neighbors timeout on backup RE due to inconsistent state with master. PR1880262
-
Scaled BGP sessions remain in the Idle state after interface rollback. PR1880630
-
Incorrect MPLS label derivation with inactive EBGP route advertisement. PR1881717
-
Junos OS and Junos OS Evolved: Executing a specific show command leads to an rpd crash (CVE-2025-59959). PR1883803
-
Junos OS and Junos OS Evolved: Optional transitive BGP attribute is modified before propagation to peers causing sessions to flap (CVE-2025-60011). PR1884492
-
The rpd process crashes after BGP configuration commits involving group-split-size and RIB-sharding. PR1887911
-
BGP Prefix-SID Label collision causing RPD crash. PR1889749
-
The rpd process crashes in an Inter-AS Option-AB L3VPN with BGP multipath list-nexthop enabled. PR1898734
-
IS-IS FA configuration in IPv4 or IPv6 Multicast topology may cause inconsistency in routing table leading to routing loop. PR1906578
-
Routes are hidden when accept-own feature is enabled with rib-sharding. PR1907391
-
The rpd process crashes in a vrf having EVPN-VXLAN routes with specific configuration. PR1907558
-
Junos and Junos OS Evolved platforms experience high CPU after FPC reboot causing unpredictable issues with protocols (OSPF/IS-IS/BGP, etc.) managed by PPMD. PR1909719
-
Memory leak is seen in rpd process when VRF routing instance configured with vrf-table-label is deleted and added back. PR1910691
-
BGP task replication will be stuck in 'InProgress' state following an RE switchover when two single hop EBGP sessions are configured on two different interfaces using the IP addresses from the same subnet. PR1914814
Services Applications
Subscriber Access Management
-
The 'bbe-smgd' process crashes in BNG with APM environment when loopback interface is moved/removed from a routing-instance through CLI. PR1862071