CB Response: Cbsensor process Consuming High CPU Utilization on Linux Endpoint

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• cbsensor process has high CPU utilization
• memory utilization increases until all memory resources are unavailable. 
• Memory and CPU are released after a system restart, but continue to grow again

Environment

• CB Response Linux Sensor: 6.1.7 through 6.1.9
• RHEL Linux: All Supported Versions

Cause

Defects in the Linux sensor versions 6.1.7 through 6.1.9 caused a memory leak, which lead to resource issues.

Resolution

Upgrade to the 6.1.10 Linux sensor, which has serveral fixes for the memory leak and resource issues.