[CWS] do not enable fentry on kernel < 6.1 (#31664)

DataDog · Dec 2, 2024 · be4b703 · be4b703
1 parent 066618a
commit be4b703
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/pkg/security/probe/probe_ebpf.go b/pkg/security/probe/probe_ebpf.go
@@ -194,6 +194,12 @@ func (p *EBPFProbe) selectFentryMode() {
 		return
 	}
 
+	if p.kernelVersion.Code < kernel.Kernel6_1 {
+		p.useFentry = false
+		seclog.Warnf("fentry enabled but not fully supported on this kernel version (< 6.1), falling back to kprobe mode")
+		return
+	}
+
 	if !p.kernelVersion.HaveFentrySupport() {
 		p.useFentry = false
 		seclog.Errorf("fentry enabled but not supported, falling back to kprobe mode")