Who rated this post

TL;DR : debug swm cancel

yes there is

first a little background so you know what you're doing:

when you install a PAN-OS, the install takes place on a dormant root partition, PAN-OS uses an active and inactive partition to run it's OS.

after the install, the bootloader is switched to start using the dormant partition as the active partition after the next reboot so you can keep working in your current install untill you reboot and then you're on the new one

to recover from a accidental install, you can take the same steps as it would to do a full rollback, but this time without the reboot:

in CLI verify what status SWM (softwaremanager) is in:

reaper@PA-440> debug swm status

Partition         State             Version
--------------------------------------------------------------------------------
sysroot0          PENDING-CHANGE    11.2.4
sysroot1          RUNNING-ACTIVE    11.2.3
maint             READY             11.2.4

as you can see i am running 11.2.3 and 11.2.4 has been installed and pending a reboot (PENDING-CHANGE)

if i want to roll that back i can use debug swm cancel to cancel the upgrade, now the other partition becomes READY instead of pending change, and my MAINT partition is reverted to 11.2.3

reaper@PA-440> debug swm cancel 
Executing this command will cancel any pending changes to software. Do you want to continue? (y or n) 

Software cancel job enqueued with jobid 5242. Run 'show jobs id 5242' to monitor its status.
5242


reaper@PA-440> 
reaper@PA-440> debug swm status

Partition         State             Version
--------------------------------------------------------------------------------
sysroot0          READY             11.2.4
sysroot1          RUNNING-ACTIVE    11.2.3
maint             READY             11.2.3

hope this helps