3 ms·
Well they crowdstrike crashed a kernel with it
by LtWorf 2y ago
Well they crowdstrike crashed a kernel with it
- IsTom 2y agoIsn't being able to crash anything with eBPF is a bug in either kernel or eBPF? As I understand it's supposed to prevent exactly that.
- skissane 2y agoApparently that wasn't (entirely) CrowdStrike's fault: https://news.ycombinator.com/item?id=41030352 https://news.ycombinator.com/item?id=41030352 Whereas this Windows outage rather obviously was. eBPF being able to crash the kernel is usually sign of a kernel bug. And it sounds like in this case it was even a bug specific to Red Hat kernels, introduced by a Red Hat patch. That said, even if they are triggering a Red Hat kernel bug, CrowdStrike should be testing their software adequately enough to pick up that issue before customers do – and it sounds like they haven't been
- pclmulqdq 2y agoThat was more of a kernel bug than a crowdstrike bug. However, it's clear that they are pushing what you can do in kernel space to the limits, which is not a great sign.