Description of problem:

Pods failing with error loading seccomp filter into kernel: errno 524 in OpenShift 4 because of a known kernel bug that introduced a seccomp memory leak. Checking the events on the namespace where the pod is failing, or running the oc describe pod command, the following error appear:

runc create failed: unable to start container process: unable to init seccomp: error loading seccomp filter into kernel: error loading seccomp filter: errno 524

Prerequisites (if any, like setup, operators/versions):

Red Hat OpenShift Container Platform (RHOCP)

    4.12
    4.13.9 or earlier

Steps to Reproduce

1. <steps>

Actual results:

Pods have CreateContainerError or Pending status.

Expected results:

Pods have Running status.

Reproducibility (Always/Intermittent/Only Once):

Build Details:

Workaround:

See https://access.redhat.com/solutions/7030968.

Additional info: