Troubleshooting
Problem
The QRadar EDR Linux agent version 1.1.0 and earlier does not start on CentOS Stream 9 after upgrading to newer kernel versions. Customers may observe that the agent fails during initialization and does not enter a healthy running state.
This issue has been verified on the following kernel: 5.14.0‑635.el9
Resolving The Problem
There is currently no workaround available. The Developement Team is actively working on a Linux agent update designed to restore compatibility with the latest CentOS Stream 9 kernels. A resolution will be delivered in a future agent release.
Document Location
Worldwide
[{"Type":"MASTER","Line of Business":{"code":"LOB77","label":"Automation Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSS3Y22","label":"IBM Security QRadar Suite - EDR"},"ARM Category":[{"code":"a8m3p000000hBSZAA2","label":"Agent-\u003EInstallation-\u003ELinux"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":""}]
Product Synonym
ReaQta
Was this topic helpful?
Document Information
Modified date:
26 January 2026
UID
ibm17257450