Bugcheck 0x139 CORRUPT_LIST_ENTRY with Endpoint Protection Ironx64.sys

Products

• Endpoint Protection

Issue/Introduction

After upgrading to Symantec Endpoint Protection 14.3 RU4 client some servers may crash due to a timing issue.

Environment

Release : 14.3 RU4 Client

 

Cause

SONAR (BASH) is requesting reputation info in two different threads using the same IRON file object. IRON does not synchronize this operation and one of the internal list entries gets corrupted and causes the crash.

 

Resolution

This issue is fixed in Symantec Endpoint Protection (SEP) 14.3.5.0 (RU5). For information on how to obtain the latest build of SEP, see Download Symantec software, tools, and patches.

Additional Information

CRE-10158