CB Response: 6.2.x Linux Sensor core dumps when exiting / shutting down.

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• The sensor is stopped successfully and there are no errors in the console, but sensor produces a crash file in /var/crash folder

Environment

• CB Response Linux Sensor: 6.2.2 and below
• CentOS: Version 6.10
• RHEL: Version 6.10

Cause

Incorrect thread handle behavior

Resolution

Fixed in the 6.3.0 Linux sensor

Additional Information

Since the crashing occurs only during the sensor shutdown, the only ill effects are the creation of the core dump file.