Carbon Black Cloud: Kernel panic after upgrade to Big Sur 11.3 with KEXT mode Sensor

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Kernel panics on macOS devices with CBC Sensor 3.5.1.x installed in KEXT mode or above after upgrading OS to Big Sur 11.3

Environment

• Carbon Black Cloud Sensor: 3.5.1.x
• Apple macOS: 11.3 (Big Sur, released 26-Apr-2021)

Cause

Operating System issue reported to and requiring fix by Apple, Inc.

Resolution

• Workaround has been included in 3.5.2.X sensors, upgrading will avoid this issue
• Requires a fix from Apple, Inc.

Additional Information

• Recommendation for 3.5.1.x Sensors is to switch from KEXT mode to System Extension mode to stop kernel panics
• Upgrade to 3.5.2.78 sensor or later