Database/Firmware, BMC & network fabric
Juniper Junos OS / Junos OS Evolved (rpd BGP session handling): A genuine, valid BGP UPDATE message resets a live BGP
Impact
A genuine, valid BGP UPDATE message resets a live BGP session between peers. Because the message is valid, no filter catches it — the fabric tears down and rebuilds sessions on demand from an adjacent attacker. Repeated, it keeps the underlay in permanent reconvergence, which for a synchronous training job is indistinguishable from an outage.
Who can reach it
Unauthenticated attacker with adjacent network access able to originate a BGP UPDATE into the fabric.
What to do
Junos upgrade plus reboot, staged across ECMP pairs. There is no clean config workaround because the triggering message is legitimate; tighten which peers you accept sessions from and monitor for session-reset storms in the meantime.
References
Related entries
- Juniper Junos OS / Junos OS Evolved (annotate configuration command): The `annotate` configuration command can be usedCVE-2025-52989 · Juniper Junos OS / Junos OS Evolved (annotate configuration command)Unscored
- Juniper Junos OS (QFX5000-Series, EX4600-Series): A physical-access path into affected QFX5000 and EX4600 switchesCVE-2025-59957 · Juniper Junos OS (QFX5000-Series, EX4600-Series)Unscored
- Juniper Junos OS Evolved (QFX5000 / PTX, multicast packet handling): Crafted multicast packets crash and restartCVE-2025-59969 · Juniper Junos OS Evolved (QFX5000 / PTX, multicast packet handling)Unscored
- ASPEED crypto/ACRY accelerator driver (drivers/crypto/aspeed): The ACRY driver's probe error path and its remove pathCVE-2025-68172 · ASPEED crypto/ACRY accelerator driver (drivers/crypto/aspeed)Unscored
- Linux kernel mlx5_core firmware tracer (diag/fw_tracer): The firmware tracer took format strings directly from deviceCVE-2025-68816 · Linux kernel mlx5_core firmware tracer (diag/fw_tracer)Unscored
- Gigabyte UEFI firmware (SMM, unchecked RBX pointer): An attacker-controlled register is used as an unchecked pointerCVE-2025-7026 · Gigabyte UEFI firmware (SMM, unchecked RBX pointer)Unscored
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.