BugZero | Palo Alto Networks BugID PAN-303959 - Traffic that is incorrectly identified as unknown-...

Palo Alto Networks - Defect ID: PAN-303959

Traffic that is incorrectly identified as unknown-tcp / unknown-udp eventually drops due to an App-ID resource limitation issue.

Palo Alto Networks - Defect ID: PAN-303959

Traffic that is incorrectly identified as unknown-tcp / unknown-udp eventually drops due to an App-ID resource limitation issue.

Last updated on May 15th, 2026

BugZero Risk Score
6.3 Medium

Overall: 6.3

Severity: 6.4

Community: 3.7

Lifecycle: 10.0

What is the BugZero Risk Score?

Palo Alto Networks Integration

Learn more about where this data comes from

Palo Alto Networks Integration

Learn more

Bug Scrub Advisor

Streamline upgrades with automated vendor bug scrubs

Bug Scrub Advisor

Learn more

BugZero Enterprise

Wish you caught this bug sooner? Get proactive today.

BugZero Enterprise

Learn more

Bug Details

Views: 16

Description

The earliest recollection of this bug is traced back to PAN-OS 10.2.10 - May 15, 2026. This bug is fixed in PAN-OS versions 11.2.10-h3, 11.2.7-h10, 11.1.10-h21, 11.1.6-h25, 11.2.11, 11.1.13-h1, 11.1.10-h12, 12.1.5. Traffic that is incorrectly identified as unknown-tcp/unknown-udp eventually drops due to an App-ID resource limitation issue. Traffic that is incorrectly identified as unknown-tcp / unknown-udp eventually drops due to an App-ID resource limitation issue. Fixed an issue where traffic is incorrectly identified as unknown-tcp/unknown-udp due to App-ID resource leak and eventually dropped. Fixed an issue where traffic was incorrectly identified as unknown-tcp/unknown-udp due to App-ID resource leak and eventually dropped. For more information: https://docs.paloaltonetworks.com/ngfw/release-notes/12-1/pan-os-12-1-4-known-and-addressed-issues/pan-os-12-1-4-known-issues https://docs.paloaltonetworks.com/ngfw/release-notes/12-1/pan-os-12-1-5-known-and-addressed-issues/pan-os-12-1-5-addressed-issues https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-10-known-and-addressed-issues/pan-os-10-2-10-known-issues https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-13-known-and-addressed-issues/pan-os-10-2-13-known-issues https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-16-known-and-addressed-issues/pan-os-10-2-16-known-issues https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-17-known-and-addressed-issues/pan-os-10-2-17-known-issues https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-18-known-and-addressed-issues/pan-os-10-2-18-known-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-10-known-and-addressed-issues/pan-os-11-1-10-h12-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-10-known-and-addressed-issues/pan-os-11-1-10-h21-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-10-known-and-addressed-issues/pan-os-11-1-10-known-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-11-known-and-addressed-issues/pan-os-11-1-11-known-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-12-known-and-addressed-issues/pan-os-11-1-12-known-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-13-known-and-addressed-issues/pan-os-11-1-13-h1-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-13-known-and-addressed-issues/pan-os-11-1-13-known-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-14-known-and-addressed-issues/pan-os-11-1-14-known-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-6-known-and-addressed-issues/pan-os-11-1-6-h25-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-10-known-and-addressed-issues/pan-os-11-2-10-h3-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-10-known-and-addressed-issues/pan-os-11-2-10-known-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-11-known-and-addressed-issues/pan-os-11-2-11-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-4-known-and-addressed-issues/pan-os-11-2-4-known-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-5-known-and-addressed-issues/pan-os-11-2-5-known-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-6-known-and-addressed-issues/pan-os-11-2-6-known-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-7-known-and-addressed-issues/pan-os-11-2-7-h10-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-7-known-and-addressed-issues/pan-os-11-2-7-known-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-8-known-and-addressed-issues/pan-os-11-2-8-known-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-9-known-and-addressed-issues/pan-os-11-2-9-known-issues

Relevant Products

Click on a version to see all relevant bugs

Affected versions:11.2.10, 10.2.17, 11.1.14, 11.2.5, 11.1.10, 11.2.4, 11.1.11, 11.2.9, 10.2.18, 12.1.4, 10.2.13, 10.2.10, 10.2.16, 11.1.13, 11.2.6, 11.2.7, 11.2.8, 11.1.12

Fixed versions: 11.2.10-h3, 11.2.7-h10, 11.1.10-h21, 11.1.6-h25, 11.2.11, 11.1.13-h1, 11.1.10-h12, 12.1.5

Relevant Products

Click on a version to see all relevant bugs

Affected versions:11.2.10, 10.2.17, 11.1.14, 11.2.5, 11.1.10, 11.2.4, 11.1.11, 11.2.9, 10.2.18, 12.1.4, 10.2.13, 10.2.10, 10.2.16, 11.1.13, 11.2.6, 11.2.7, 11.2.8, 11.1.12

Fixed versions: 11.2.10-h3, 11.2.7-h10, 11.1.10-h21, 11.1.6-h25, 11.2.11, 11.1.13-h1, 11.1.10-h12, 12.1.5

Top Palo Alto Networks Defects

6.3Defect ID: PAN-292447
Fixed an issue where Panorama did not display data in the Feature Adoption tab in Strata Cloud Manager due to the system creating and deleting a CLI user for each interval instead of reusing a permanent CLI user for telemetry.
6.3Defect ID: PAN-306534
Fixed an issue were the all_task process repeatedly restarted due to memory pool corruption when processing fragmented DNS over HTTPs (DoH) JSON queries. This occurred due to incorrect buffer length calculations during memory deallocation when the query name field spanned multiple packets.
6.3Defect ID: PAN-307702
( Firewalls in HA configurations only ) Fixed an issue where traffic passing through AE layer 2 interfaces was interrupted during HA failovers.
6.3Defect ID: PAN-269254
Fixed an issue where high CPU utilization caused GlobalProtect VPN tunnels to flap, users to be disconnected, and the CLI to become unresponsive. This occurred when a large number of GlobalProtect users were actively processing application traffic.
6.3Defect ID: PAN-313623
Fixed an issue where the /opt/pancfg/mgmt/ssl/private/ directory on Palo Alto Networks devices with TPM support became 100% utilized due to an accumulation of undeleted .pub_pem files. This occurred because executing the show device-certificate status CLI command initiated a process that generated these files but failed to remove them, which prevented the fetching of new device certificates.

Ready to prevent the next vendor outage?

Get a demo

Change history

2026-05-15 Added: 11.2.10, 11.1.14, 11.2.5, 11.1.10, 11.2.4, 11.1.11, 11.2.9, 10.2.18, 12.1.4, 11.1.13, 11.2.6, 11.2.7, 11.2.8, 11.1.12

2026-05-13 Added: 11.1.12, 12.1.3, 11.2.8, 11.2.7, 11.1.13, 11.2.5, 11.1.10, 11.2.10, 11.2.4, 11.1.11, 10.2.18, 11.2.9, 11.2.6, 11.1.14

2026-05-13 Added: 12.1.4, 11.1.13, 11.1.10, 11.2.7, 11.1.11, 11.2.5, 10.2.18, 11.2.6, 11.2.9, 11.1.12, 11.2.10, 11.2.8, 11.2.4, 11.1.14

2026-05-13 Added: 11.1.12, 11.1.13, 11.2.6, 11.2.5, 11.2.9, 11.1.14, 11.1.11, 11.2.4, 11.2.7, 11.2.8, 11.2.10, 12.1.3, 11.1.10, 10.2.18

2026-03-25 Added: 10.2.18, 11.1.11, 11.2.8, 11.2.7, 12.1.4, 11.1.14, 11.2.4, 11.1.10, 11.1.12, 11.2.5, 11.2.6, 11.1.13, 11.2.10, 11.2.9

2026-03-25 Added: 11.1.13, 11.2.9, 11.1.12, 10.2.18, 12.1.4, 11.1.10, 11.2.4, 11.2.5, 11.2.10, 11.2.6, 11.1.11, 11.2.7, 11.2.8, 11.1.14

2026-03-10 Added: 11.2.10, 10.2.18, 11.1.12, 11.1.10, 11.2.8, 11.2.4, 11.1.13, 11.2.5, 11.2.7, 12.1.3, 11.1.11, 11.2.9, 11.2.6

2026-03-10 Added: 11.2.8, 11.1.13, 11.1.12, 11.2.4, 11.2.5, 11.2.6, 11.2.10, 11.1.10, 11.1.11, 12.1.4, 11.2.9, 10.2.18, 11.2.7

2026-03-10 Added: 11.2.8, 10.2.18, 11.1.10, 11.2.7, 11.2.6, 11.2.10, 11.2.9, 11.1.12, 11.2.5, 11.1.13, 11.1.11, 11.2.4, 12.1.4

2026-03-10 Added: 12.1.4, 11.2.5, 11.2.8, 11.1.12, 11.2.7, 11.2.10, 11.2.4, 11.1.11, 11.2.9, 11.1.10, 11.1.13, 11.2.6, 10.2.18

2026-03-10 Added: 12.1.4, 11.2.10, 11.1.11, 11.2.4, 11.2.6, 10.2.18, 11.1.12, 11.2.7, 11.2.5, 11.2.8, 11.2.9, 11.1.10, 11.1.13

2026-03-10 Added: 11.1.12, 11.2.6, 11.1.11, 11.2.7, 11.2.10, 11.1.10, 11.2.5, 12.1.4, 11.1.13, 11.2.4, 10.2.18

2026-02-17 Added: 10.2.18, 11.2.10, 11.1.10, 11.2.5, 11.2.8, 11.1.11, 11.2.4, 11.1.12, 11.2.9, 11.1.13, 11.2.6

2026-02-17 Added: 10.2.18, 11.1.10, 11.1.13, 11.2.8, 11.2.10, 11.2.9, 11.2.4, 11.1.12, 11.1.11, 11.2.6, 11.2.5, 11.2.7

2026-02-17 Added: 11.2.9, 11.1.12, 11.2.5, 11.2.4, 11.2.10, 11.2.8, 11.2.7, 11.1.10, 11.1.11, 11.2.6, 10.2.18, 11.1.13

2026-02-17 Added: 11.1.13, 10.2.18, 11.2.5, 11.1.12, 11.2.4, 11.1.11, 11.2.9, 11.2.8, 11.2.10, 11.2.7, 11.2.6, 11.1.10

2026-02-17 Added: 11.2.6, 11.2.8, 11.2.7, 10.2.18, 11.1.12, 11.2.9, 11.2.4, 11.2.10, 11.2.5, 11.1.10, 11.1.13

2026-02-12 Added: 10.2.18, 11.2.5, 11.2.4, 11.2.7, 11.2.10, 11.2.6, 11.2.9, 11.2.8

2026-01-27 Added: 10.2.18, 11.2.4, 11.2.7, 11.2.5, 11.2.10, 11.2.8, 11.1.11, 11.1.13, 11.1.12, 11.2.9, 11.2.6

2026-01-27 Added: 11.1.10, 11.2.10, 10.2.18, 11.1.13, 11.1.12, 11.2.8, 11.2.4, 11.2.6, 11.2.9, 11.2.5, 11.2.7, 11.1.11

2026-01-27 Added: 11.1.11, 10.2.18, 11.1.10, 11.2.5, 11.2.7, 11.2.9, 11.2.4, 11.1.12, 11.2.8, 11.2.6, 11.2.10, 11.1.13

2026-01-22 Added: 11.2.4, 10.2.18, 11.1.11, 11.2.6, 11.1.12, 11.2.5, 11.2.8, 11.2.9, 11.2.7, 11.1.13, 11.1.10, 11.2.10

2026-01-14 Added: 10.2.18, 11.2.5, 11.2.6, 11.2.8, 11.2.7, 11.1.12, 11.1.13, 11.2.9, 11.2.10, 11.1.11, 11.2.4, 11.1.10

2025-11-24 Added: 11.2.9, 11.1.13, 11.2.6, 11.1.10, 11.2.5, 11.2.8, 11.1.11, 11.2.4, 11.2.7, 10.2.18, 11.1.12

2025-11-24 Added: 11.2.4, 11.2.6, 10.2.18, 11.2.9, 11.1.10, 11.2.7, 11.1.13, 11.2.5, 11.1.11, 11.1.12, 11.2.8

2025-11-24 Added: 11.1.12, 11.2.5, 11.2.6, 10.2.18, 11.2.7, 11.1.13, 11.2.8, 11.2.9, 11.1.11, 11.2.4

2025-11-24 Added: 11.2.5, 11.1.11, 11.2.6, 11.2.8, 11.2.9, 11.1.12, 11.2.4, 11.2.7, 11.1.13, 10.2.18, 11.1.10

2025-11-24 Added: 10.2.18, 11.2.6, 11.1.10, 11.1.11, 11.2.4, 11.2.8, 11.2.9, 11.2.7

2025-11-24 Added: 11.2.9, 11.2.7, 11.1.13, 11.2.5, 11.2.6, 11.1.12, 11.2.4, 11.1.11, 11.2.8, 11.1.10, 10.2.18

2025-11-24 Added: 11.2.8, 11.2.4, 11.2.5, 11.2.7, 11.2.9, 10.2.18, 11.1.11, 11.2.6, 11.1.10, 11.1.13, 11.1.12

2025-10-17 Added: 11.1.10, 10.2.18, 11.2.4, 11.2.9, 11.2.5, 11.2.6, 11.1.11, 11.2.7, 11.2.8, 11.1.12

2025-10-17 Added: 11.2.8, 11.2.7, 11.2.9, 11.2.4, 10.2.18, 11.2.5, 11.2.6

2025-10-06 Added: 11.2.9, 11.2.8, 11.2.5, 11.2.4, 11.2.7, 11.2.6

2025-10-06 Added: 10.2.16, 10.2.17, 10.2.13, 10.2.10

Palo Alto Networks - Defect ID: PAN-303959

Traffic that is incorrectly identified as unknown-tcp / unknown-udp eventually drops due to an App-ID resource limitation issue.

Palo Alto Networks - Defect ID: PAN-303959

Traffic that is incorrectly identified as unknown-tcp / unknown-udp eventually drops due to an App-ID resource limitation issue.

Last updated on May 15th, 2026

BugZero Risk Score6.3 Medium

Bug Details

Top Palo Alto Networks Defects

Ready to prevent the next vendor outage?

Links

BugZero Risk Score
6.3 Medium