App Control: Cb Protection Agent detected a problem: Unsupported kernel version installed, reporting a kernel version that is not running.

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

• Agent health message in the Console reports a similar error to this after an OS Kernel upgrade:

Current kernel: Red Hat Server 7.7 3.10.0-1062.18.1.el7.x86_64 x64
Cb Protection Agent detected a problem: Unsupported kernel version installed[3.10.0-1030.el7.x86_64]. Options[00000003] TotalFailures[1] FailureId[862] FailureId[862]

 

Environment

• Carbon Black App Control Agent: All Linux 7.2 versions and greater
• Carbon Black App Control Server: All supported versions
• Linux: All supported versions

Cause

Two possible causes:

1. An unsupported kernel is running (shown by uname -r)
2. An unsupported kernel exists but is not running. 

Resolution

The health message can either flag a problem or be a warning that an unsupported kernel is installed but not running. The error can be suppressed by deleting the unsupported kernel off the agent host.

Additional Information

• These commands run on the agent host show results similar to this:
   

  $ uname -r
  3.10.0-1062.18.1.el7.x86_64
  
  $ rpm -q kernel
  kernel-3.10.0-1062.12.1.el7.x86_64
  kernel-3.10.0-1062.18.1.el7.x86_64