System performance slow or unresponsive after a DAT update

Technical Articles ID: KB88102
Last Modified: 2/5/2021

Environment

McAfee Agent (MA) 5.x
McAfee Endpoint Security for Linux Threat Prevention (ENSLTP) 10.x
McAfee VirusScan Enterprise for Linux (VSEL) 2.0.x

All supported Linux operating systems

Problem

System performance slows or becomes unresponsive after a DAT update.

Multiple Mue_InUse processes remain in a sleep status and do not exit normally while on-access scan is enabled.

Cause

ENSLTP and VSEL support only 64-bit platforms and require Fanotify to be enabled. This issue occurs in the Fanotify feature of Linux kernels when multiple threads iterate to the same directory or files, resulting in some threads hanging.

McAfee opened the following Bug Report with Kernel.org: https://bugzilla.kernel.org/show_bug.cgi?id=95131.

Solution

This issue is not directly related to or caused by MA, ENSLTP, or VSEL. Linux.org resolved this issue in Linux kernels 3.14.49, 3.18.19, and 4.14. Also, the fixes are backported to the respective operating systems listed below:

Red Hat Enterprise Linux (RHEL) 7.2 Kernel 3.10.0-327 and later
SUSE Linux Enterprise Server (SLES) 12 Kernel 3.12.28-4-default and later
Ubuntu 16.04 LTS Kernel 4.4.0-21-generic and later

For MA supported platforms, see KB51573 - Supported platforms for McAfee Agent 5.x.

Affected Products

Endpoint Security for Linux Threat Prevention 10.x
McAfee Agent 5.7.x
McAfee Agent 5.6.x
VirusScan Enterprise for Linux 2.0.x (EOL)

Languages:

This article is available in the following languages:

English United States
Spanish Spain
French
Italian
Japanese
Portuguese Brasileiro
Chinese Simplified

Knowledge Center

System performance slow or unresponsive after a DAT update

Environment

Problem

Cause

Solution

Affected Products

Languages:

Title

Title

Knowledge Center

System performance slow or unresponsive after a DAT update

Environment

Problem

Cause

Solution

Affected Products

Languages:

Choose your region

Title

Title