CVE-2026-102046: CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop') in Juniper Networks Junos OS

This vulnerability (CVE-2026-102046) is an infinite loop (CWE-835) in the netsctp.ko kernel module of Juniper Networks Junos OS on MX Series devices. An unauthenticated attacker can exploit this by sending specially crafted SCTP network traffic, causing the system to enter a loop with no exit condition, leading to denial of service. The vulnerability affects multiple version ranges of Junos OS as specified, with a CVSS 3.1 base score of 7.5 indicating high severity. No vendor advisory or patch information is included in the provided data.

Successful exploitation causes denial of service (DoS) on affected Junos OS MX Series devices by triggering an infinite loop in the netsctp.ko module. There is no impact on confidentiality or integrity reported. The attacker does not require authentication or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround information is provided in the input data. Until a patch is available, network administrators should consider limiting exposure of affected devices to untrusted SCTP traffic if feasible.