System becomes unresponsive because of a memory leak with the AMCore content driver mfencbdc.sys

Technical Articles ID: KB90246
Last Modified: 2022-11-01 15:30:50 Etc/GMT

Environment

Endpoint Security (ENS) 10.6.x

Problem

The system becomes unresponsive because of a memory leak that occurs with the AMCore content driver mfencbdc.sys. This issue can impact systems with extended system uptimes (for example, 10 days) combined with high-volume network file share activity (for example, file servers). When the issue occurs, the Performance Monitor Memory\Pool Paged Bytes counter value continually increases until the system becomes unresponsive.

Cause

The memory leak occurs when the system thread terminate notification isn’t sent to the driver mfencbdc.sys. The issue results in pool memory being consumed under the NCr2 Pool tag, which is for storing _REMOTE_CLIENT_INFO entries. When the pool memory is exhausted, the system might become unresponsive.

Solution

This issue is resolved in Endpoint Security 10.6.1, which is available from the Product Downloads site.

NOTE: You need a valid Grant Number for access. For more information about the Product Downloads site, and alternate locations for some products, see KB56057 - How to download Enterprise product updates and documentation.

Updates are cumulative; Technical Support recommends that you install the latest one.

Knowledge Center

System becomes unresponsive because of a memory leak with the AMCore content driver mfencbdc.sys

Environment

Problem

Cause

Solution

Workaround

Affected Products

Languages:

Title

Title

Knowledge Center

System becomes unresponsive because of a memory leak with the AMCore content driver mfencbdc.sys

Environment

Problem

Cause

Solution

Workaround

Affected Products

Languages:

Choose your region

Title

Title