CVE-2026-101980

Awaiting Analysis Awaiting Analysis - Queue

Integer Underflow in Juniper Junos OS Kernel

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Juniper Networks, Inc.

Description

An Integer Underflow vulnerability in the kernel of Juniper Networks Junos OS with Extended Echo configured allows an unauthenticated, network-based attacker to cause a denial of service by a kernel crash.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-101980

EUVD

EUVD-2026-101439

Affected Vendors & Products

Vendor	Product	Version / Range
Juniper	Networks	Junos OS 0
Juniper	Networks	Junos OS 23.4
Juniper	Networks	Junos OS 24.2
Juniper	Networks	Junos OS 24.4
Juniper	Networks	Junos OS 25.2
Juniper	Networks	Junos OS 25.4
Juniper	Networks	Junos OS 26.2

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-191	The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

Attack-Flow Graph

Executive Summary

This vulnerability is an Integer Underflow flaw in the kernel of Juniper Networks Junos OS when Extended Echo is configured. It allows an unauthenticated attacker on the network to crash the kernel, causing a denial of service.

Detection Guidance

This vulnerability can be detected by checking for kernel crashes or system instability in Juniper Junos OS devices with Extended Echo configured. Monitor logs for kernel panic messages or unexpected reboots. Juniper recommends updating to a patched version of Junos OS to mitigate the risk.

Impact Analysis

The impact includes system crashes leading to service disruption, potential loss of network connectivity, and downtime for affected Juniper devices running Junos OS with Extended Echo enabled.

Compliance Impact

This vulnerability could impact compliance with GDPR and HIPAA by causing a denial of service through kernel crashes, potentially leading to unauthorized data access or service disruptions. However, specific compliance impacts depend on system configuration and deployment context.

Mitigation Strategies

Apply the latest Junos OS update from Juniper Networks to patch the Integer Underflow vulnerability. Disable Extended Echo configuration if not required. Monitor network traffic for unusual patterns indicating exploitation attempts.

Hi! I’m here to help you understand CVE-2026-101980. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70