Falcon Sensor pre-7.23 Fails Network Containment on RHEL9.6 and RHEL10

Solution Verified - Updated -

Issue

Due to changes in the eBPF verifier subsystem of the Linux Kernel in RHEL9.6 and RHEL10, CrowdStrike Falcon Sensor versions older than 7.23 fail to network contain the host.

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content