Not just Debian and Rocky, but RHEL too. https://access.redhat.com/solutions/7068083 https://access.redhat.com/solutions/7068083 I ran into this doing CentOS7

Not just Debian and Rocky, but RHEL too. https://access.redhat.com/solutions/7068083 https://access.redhat.com/solutions/7068083 I ran into this doing CentOS7 to Alma9 upgrades. The bug was in RHEL, Alma and Rocky and any other distro derived from RHEL. I had a VM go into an endless reboot cycle and the only way to get back in was to boot to an emergency rescue console and disable falcon-sensor. The problem was something to do with eBPF, and one of the workarounds was to tell falcon sensor to use kernel mode and not auto or user (bpf) mode. We don't allow automatic updates on hosts, however, so thankfully this was contained, but it certainly begs the question of just what testing Crowdstrike are doing.