High memory usage due to unreclaimable slab cache (kmalloc) growth caused by CrowdStrike Falcon sensor modules

Issue

• The system experiences memory exhaustion due to a large number of unreclaimable allocations in the kmalloc-* slab cache, caused by the CrowdStrike Falcon sensor (falcon_kal/falcon_lsm_serviceable) modules.

# cat /proc/slabinfo |awk '{printf "%7i MiB : %s\n",$6*$(NF-1)/256,$1}'|sort -nk 1 -r|head -5
   20367 MiB : kmalloc-2048
   2648 MiB : kmalloc-192
   2299 MiB : kmalloc-1024
   1757 MiB : shared_policy_node
   1049 MiB : kmalloc-64