Kernel Panic After Upgrade of the Linux Kernel to RHEL 9.7 (5.14.0-611.7.1.el9_7.x86_64) During Symantec Endpoint Protection KMOD Update
Article ID: 422167
Updated On:
Products
Issue/Introduction
When running a Symantec Endpoint Protection for Linux KMOD update on systems upgraded to the RHEL 9.7 kernel version 5.14.0-611.7.1.el9_7.x86_64, the Linux machine may crash due to a kernel panic.
Environment
RHEL 9.7
Kernel: 5.14.0-611.7.1.el9_7.x86_64
Cause
Customers may encounter kernel panics on RHEL 9.7 systems during updates to the Symantec Endpoint Protection for Linux kernel module (KMOD). This issue affects multiple endpoints and prevents the agent from updating successfully.
Our investigation has identified the sisevt kernel module as the source of the general protection fault. The root cause is an attempt by the module to modify the CPU’s cr0 control register, an operation that is blocked by the Supervisor Mode Access Prevention (SMAP) security feature in the affected kernel version.
Resolution
A resolution has been released for the identified issue. Please upgrade the SDCSS-KMOD package to version 10.0.8.2730. This fix is now available for all RHEL9 environments.
Feedback
