CVE-2026-57030

Name of the Vulnerable Software and Affected Versions Junos OS on SRX Series versions 24.2 through 24.2R2-S3 Junos OS on SRX Series versions 24.4 through 24.4R2-S2 Junos OS on SRX Series versions 25.2 through 25.2R2

Description A race condition exists in the packet forwarding engine (PFE) during stateful traffic processing. When flows are being removed, a synchronization error may cause the flow timeout to be set to a value exceeding 10,000 seconds instead of the intended 3 seconds. This results in an accumulation of invalidated sessions that cannot be cleared manually. Consequently, an unauthenticated, network-based attacker can cause a Denial-of-Service (DoS), leading to a complete stop in forwarding that requires a manual reboot or causing a flowd core dump and automatic reboot.

Recommendations Update Junos OS on SRX Series version 24.2 to 24.2R2-S3 or later. Update Junos OS on SRX Series version 24.4 to 24.4R2-S1 or 24.4R2-S2. Update Junos OS on SRX Series version 25.2 to 25.2R1-S2 or 25.2R2.