System Hang after upgrading SuSE SLE15 SP4 Kernel with Deep Security Agent

Product / Version includes:

Deep Security20.0 , Cloud One - Endpoint and Workload SecurityAll

Last updated: 2022/09/23

Solution ID: KA-0013410

Category: Troubleshoot

Summary

Customers that are using SuSE SLE15 SP4 with Deep Security Agent who have upgraded the kernel on an AMD CPU and have updated the kernel support package may encounter system hang or kernel panic.

Here is the list of new SuSE SLE15 SP4 kernel:

July-22-2022	5.14.21-150400.24.11.1
Aug-12-2022	5.14.21-150400.24.18.1
Sep-16-2022	5.14.21-150400.24.21.2

Root Cause

The backport of AMD retbleed patch broke ftrace support in kernel, which is indirectly used by tmhook and bmhook, causing kernel oops when probed function is called.

Refer bug report from SuSE:

[1] https://github.com/evilsocket/opensnitch/issues/732

[2] https://bugzilla.suse.com/show_bug.cgi?id=1203103

Workaround

Boot the system back to SuSE SLE15 SP4 kernel - 5.14.21-150400.22.1 if system have multi-kernel installed.

Note: It is recommended to keep the SuSE SLE15 SP4 on default kernel - 5.14.21-150400.22.1 until the bug is fixed.

Was this article helpful?

Featured

Automation Center

Education Portal

Online Help Center

Service Status

TrendConnect

System Hang after upgrading SuSE SLE15 SP4 Kernel with Deep Security Agent

System Hang after upgrading SuSE SLE15 SP4 Kernel with Deep Security Agent

Product / Version includes:

Summary