BugZero | Cisco BugID CSCvx32806 - Access Points stuck in bootloop due to image check...

Cisco - Defect ID: CSCvx32806

Access Points stuck in bootloop due to image checksum verification failed

Cisco - Defect ID: CSCvx32806

Access Points stuck in bootloop due to image checksum verification failed

Last updated on January 5th, 2026

BugZero Risk Score
9.7 High

Overall: 9.7

Severity: 10.0

Lifecycle: 9.1

Popularity: 6.9

What is the BugZero Risk Score?

Cisco Integration

Learn more about where this data comes from

Cisco Integration

Learn more

Bug Scrub Advisor

Streamline upgrades with automated vendor bug scrubs

Bug Scrub Advisor

Learn more

BugZero Enterprise

Wish you caught this bug sooner? Get proactive today.

BugZero Enterprise

Learn more

Bug Details

Views: 154

Description

Symptom

An access point may be stuck in a boot loop, with messages like this seen on the console verify signature failed for /bootpart/part1/ramfs_data_cisco.cpio.lzma or verify signature failed for /bootpart/part2/ramfs_data_cisco.squashfs

Conditions

Affects AP-COS access points, all models (2800/3800/4800/91XX) except for 1800 series. Seen after downloading an image via CAPWAP from a 9800 series controller (has not been seen after downloading from AireOS.) Most widely seen after downloading an image to the AP over a WAN link that is lossy and MTU is < 1485.

Workaround

To avoid APs getting into this condition after upgrading, see the article Safely Upgrade Access Points, Avoiding Image Corruption That Causes Boot Loop https://www.cisco.com/c/en/us/support/docs/wireless/wireless-lan-controller-software/221869-safely-upgrade-access-points-avoiding-i.html . To recover APs that are already in this condition, see the article Recover from a Boot Loop Caused by Image Corruption on Wave 2 and 11ax Access Points (CSCvx32806) https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/220443-how-to-avoid-boot-loop-due-to-corrupted.html

Further Problem Description

This commit CSCvx32806 addresses the problem where the access point, after downloading a corrupt image, nonetheless tries to boot that corrupt image. With this fix, the AP will instead keep retrying the image download, until, ideally, it succeeds. This issue is now documented as Field Notice FN74109, https://www.cisco.com/c/en/us/support/docs/field-notices/741/fn74109.html .

Change history

2026-01-05 Removed: 8.3.121.0, 8.3.122.0, 8.3.130.0, 8.3.141.0, 8.3.143.0, 8.3.150.0, 8.5.103.0, 8.5.110.0, 8.5.120.0, 8.5.131.0, 8.5.135.0, 8.5.140.0, 8.5.151.0, 8.5.160.0, 8.5.161.0, 8.5.164.0, 8.5.171.0, 8.5.176.0, 8.5.182.0, 8.6.101.0, 8.7.102.0, 8.7.106.0, 8.7.258.0, 8.8.100.0, 8.8.111.0, 8.8.120.0, 8.8.125.0, 8.8.130.0, 8.8.258.0, 8.8.259.0, 8.8.261.0, 8.9.100.0, 8.9.111.0

2025-12-19 Removed: 8.3.121.0, 8.3.122.0, 8.3.130.0, 8.3.141.0, 8.3.143.0, 8.3.150.0, 8.5.103.0, 8.5.110.0, 8.5.120.0, 8.5.131.0, 8.5.135.0, 8.5.140.0, 8.5.151.0, 8.5.160.0, 8.5.161.0, 8.5.164.0, 8.5.171.0, 8.5.176.0, 8.5.182.0, 8.6.101.0, 8.7.102.0, 8.7.106.0, 8.7.258.0, 8.8.100.0, 8.8.111.0, 8.8.120.0, 8.8.125.0, 8.8.130.0, 8.8.258.0, 8.8.259.0, 8.8.261.0, 8.9.100.0, 8.9.111.0

2025-12-16 Removed: 8.3.121.0, 8.3.122.0, 8.3.130.0, 8.3.141.0, 8.3.143.0, 8.3.150.0, 8.5.103.0, 8.5.110.0, 8.5.120.0, 8.5.131.0, 8.5.135.0, 8.5.140.0, 8.5.151.0, 8.5.160.0, 8.5.161.0, 8.5.164.0, 8.5.171.0, 8.5.176.0, 8.5.182.0, 8.6.101.0, 8.7.102.0, 8.7.106.0, 8.7.258.0, 8.8.100.0, 8.8.111.0, 8.8.120.0, 8.8.125.0, 8.8.130.0, 8.8.258.0, 8.8.259.0, 8.8.261.0, 8.9.100.0, 8.9.111.0

2025-12-15 Removed: 8.3.121.0, 8.3.122.0, 8.3.130.0, 8.3.141.0, 8.3.143.0, 8.3.150.0, 8.5.103.0, 8.5.110.0, 8.5.120.0, 8.5.131.0, 8.5.135.0, 8.5.140.0, 8.5.151.0, 8.5.160.0, 8.5.161.0, 8.5.164.0, 8.5.171.0, 8.5.176.0, 8.5.182.0, 8.6.101.0, 8.7.102.0, 8.7.106.0, 8.7.258.0, 8.8.100.0, 8.8.111.0, 8.8.120.0, 8.8.125.0, 8.8.130.0, 8.8.258.0, 8.8.259.0, 8.8.261.0, 8.9.100.0, 8.9.111.0

2025-12-10 Removed: 8.3.121.0, 8.3.122.0, 8.3.130.0, 8.3.141.0, 8.3.143.0, 8.3.150.0, 8.5.103.0, 8.5.110.0, 8.5.120.0, 8.5.131.0, 8.5.135.0, 8.5.140.0, 8.5.151.0, 8.5.160.0, 8.5.161.0, 8.5.164.0, 8.5.171.0, 8.5.176.0, 8.5.182.0, 8.6.101.0, 8.7.102.0, 8.7.106.0, 8.7.258.0, 8.8.100.0, 8.8.111.0, 8.8.120.0, 8.8.125.0, 8.8.130.0, 8.8.258.0, 8.8.259.0, 8.8.261.0, 8.9.100.0, 8.9.111.0

2025-07-24 Added: 16.12.1.0, 16.12.1.140, 16.12.2.132, 16.12.3.13, 16.12.3.14, 16.12.4.31, 16.12.5.13, 16.12.6.7, 16.12.7.2, 16.12.8.5, 16_12_1_0, 17.1.1.29, 17.1.1.32, 17.2.1.11, 17.2.1.15, 17.3.1.9, 17.3.2.32, 17.3.3.26, 17.3.4.30, 17.3.4.40, 17.3.5.42, 17.3.6.76, 17.4.1.6, 17.5.1.12, 17.6.1.13, 17.6.2.43, 17.6.3.33, 17.6.4.56, 17.7.1.11, 17.8.0.144, 17.9.1.8, 17.9.2.52, 8.10.105.0, 8.10.112.0, 8.10.113.0, 8.10.121.0, 8.10.122.0, 8.10.130.0, 8.10.142.0, 8.10.151.0, 8.10.162.0, 8.10.171.0, 8.10.181.0, 8.3.121.0, 8.3.122.0, 8.3.130.0, 8.3.141.0, 8.3.143.0, 8.3.150.0, 8.5.103.0, 8.5.110.0, 8.5.120.0, 8.5.131.0, 8.5.135.0, 8.5.140.0, 8.5.151.0, 8.5.160.0, 8.5.161.0, 8.5.164.0, 8.5.171.0, 8.5.176.0, 8.5.182.0, 8.6.101.0, 8.7.102.0, 8.7.106.0, 8.7.258.0, 8.8.100.0, 8.8.111.0, 8.8.120.0, 8.8.125.0, 8.8.130.0, 8.8.258.0, 8.8.259.0, 8.8.261.0, 8.9.100.0, 8.9.111.0, ap-17.11.0.10, ap-17.3.1.2, ap-17.3.2.2, ap-17.3.5.15

Relevant Products

Click on a version to see all relevant bugs

Relevant Products

Click on a version to see all relevant bugs

Top Cisco Defects

9.7Defect ID: CSCwe01579
Cat9800 wncd reload while creating an RRM Client Coverage on large scale setup
9.7Defect ID: CSCwq79831
Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software VPN Web Server Remote Code Execution Vulnerability
9.7Defect ID: CSCwa70008
Expired certs cause Security Intelligence updates to fail
9.7Defect ID: CSCvq12070
Not able to establish more than 2 simultaneous ASDM sessions
9.7Defect ID: CSCwd45843
Auth Step latency for policy evaluation due to Garbage Collection activity.

Ready to prevent the next vendor outage?

Get a demo

Cisco - Defect ID: CSCvx32806

Access Points stuck in bootloop due to image checksum verification failed

Cisco - Defect ID: CSCvx32806

Access Points stuck in bootloop due to image checksum verification failed

Last updated on January 5th, 2026

BugZero Risk Score9.7 High

Bug Details

Symptom

Conditions

Workaround

Further Problem Description

Top Cisco Defects

Ready to prevent the next vendor outage?

Links

BugZero Risk Score
9.7 High