> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/8.x/8.1-eol/cortex-xdr-agent-8.1-release-information/addressed-issues-in-cortex-xdr-agent-8.1.x.md). # Addressed Issues in Cortex XDR Agent 8.1.x #### Addressed issues in Cortex XDR agent 8.1.2 The following issues have been addressed in this release. | Issue | Description | | ---------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------ | |

CPATR‑22124

(Linux)

| Fixed an issue to prevent a potential vulnerability in the GNU C library's dynamic loader within the Cortex XDR agent image. | |

CPATR‑21933

(Linux)

| Fixed an issue to enable Cortex XDR agents to be deployed in environments in which Pod Security Admission controller enforces Pod Security Standards. | |

CPATR-21870

(Windows)

| Fixed an issue that may lead to agent upgrade failure on non-US locale OS editions | |

CPATR-21465

(Linux)

| Fixed an issue on RHEL 8 and RHEL 9-based endpoints that may prevent the Cortex XDR agent from starting correctly. | |

CPATR-21447

(Windows)

| Fixed an issue that may occur during large workload processing on high-performance endpoints. | |

CPATR-21445

(Linux)

| Fixed an issue that may lead to agent processes timeout. | |

CPATR-21331

(Windows)

| Fixed an issue that may lead to high CPU resources on Windows Server endpoints. | |

CPATR-21262

(Linux)

| Fixed an issue that may occur in rare cases on Linux Oracle 6-based endpoints where the operating system distribution type was not detected correctly. | |

CPATR-21125

(Linux)

| Fixed a rare issue that caused Cortex XDR agent installation to fail. | | CPATR-20816 | Fixed an agent stability issue that may occur after multiple cases of endpoint hardboot or by file system failures. | #### Addressed issues in Cortex XDR agent 8.1.1 The following issues have been addressed in this release. | Issue | Description | | ---------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- | |

CPATR‑20983

(Windows)

| Fixed an issue related to a Microsoft Windows Server 2022 update, that may lead to an interoperability issue or browser instability when Exploit Prevention is enabled. | | CPATR‑20862 | Fixed an issue that may impact performance on VDI systems during boot up. | |

CPATR‑20548

(Windows)

| Fixed an issue where local hash caching may impact application file access. | |

CPATR‑20281

(Windows)

| Fixed a compatibility issue that may cause devices tunneled over USB4 to malfunction. | #### Addressed issue in Cortex XDR agent 8.1.0-HF2 (8.1.0.42616) | Issue | Description | | ---------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- | |

CPATR‑20983

(Windows)

| Fixed an issue related to a Microsoft Windows Server 2022 update, that may lead to an interoperability issue or browser instability when Exploit Prevention is enabled. | #### Addressed issue in Cortex XDR agent 8.1.0-HF (8.1.0.41560) | Issue | Description | | ----------- | --------------------------------------------------------------------------------------------------------------- | | CPATR‑20931 | Fixed an issue that may lead to improper process shutdown in Windows endpoints with exploit protection enabled. | #### Addressed issues in Cortex XDR agent 8.1 release for Windows, macOS, Linux, and iOS Addressed issues in Cortex XDR agent 8.1 release for Windows, macOS, Linux, and iOS. | **Issue** | **Description** | | ---------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------- | | CPATR‑20353 | Fixed an issue where an erroneous character was displayed in the French Windows version of Cortex XDR Agent. | |

CPATR‑20300

(Windows)

| Fixed an issue that may cause instability when Microsoft Driver Verifier was enabled on an endpoint. | |

CPATR‑20269

(Windows)

| Fixed an issue that may cause the disk manager to handle detached virtual volumes incorrectly. | |

CPATR‑20246

(Linux)

| Fixed an issue to optimize resource management for allow-list processes. | |

CPATR‑20215

(MacOS)

| Fixed an issue where the Cortex XDR agent falsely reported a Cortex XDR endpoint as unprotected. | |

CPATR‑20205

(Linux)

| Fixed an issue that led to corrupted tech support files (TSF) of a large file size. | |

CPATR‑19959

(Windows)

| Fixed an issue in the Java anti-deserialization protection module that caused reporting of false positive alerts. | |

CPATR‑19904

(Windows)

| Fixed an issue that may cause the wrong storage media device type to be returned for external USB storage devices. | |

CPATR‑19823

(Windows)

| Fixed an issue that may impact boot time of Windows 11-based endpoints where virtualization-based security (VBS) was enabled. | | CPATR‑19754 | Fixed an issue that delayed uploading unknown files to WildFire. | | CPATR‑19745 | Fixed an issue of device control violation data display that may impact Device Policy exceptions for customers using serial-number-based device exceptions. | | CPATR‑19721 | Fixed an issue where in some cases, file scans were incomplete and could lead to incorrect detection. | | CPATR‑19716 | Fixed an issue that affected system extension memory in rare system cases. | |

CPATR‑19644

(Linux)

| Fixed some log files’ permissions in order to comply with CIS standards. | | CPATR‑19634 | Fixed an issue where in some cases, file uploads from network shares were not completed successfully. | | CPATR‑19631 | Fixed an issue where verdicts may not be synced with the server correctly. | |

CPATR‑19535

(Linux)

| Fixed an issue that falsely reported Cortex XDR agent operational status when some modules were disabled in the policy profile. | | CPATR‑19305 | Fixed an issue where corruption of internal files may lead to agent instability. | |

CPATR‑19304

(Linux)

| Fixed an issue causing SSL initialization failure due to a corrupted certificate file. | |

CPATR‑18852

(Linux)

| Fixed an issue that prevented Elasticsearch from working. | |

CPATR‑18663

(iOS)

| Fixed an issue that prevented the Uninstall Agent command from disconnecting an iOS endpoint from the Cortex XDR management console. | |

CPATR‑18293

(Windows)

| Fixed an issue where various file system volumes, such as CSV, VSS, and VHD, could not be excluded from monitoring. | |

CPATR‑17605

(Linux)

| Fixed an issue that may prevent the Kernel module from loading successfully. | --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://cortex-docs.paloaltonetworks.com/8.x/8.1-eol/cortex-xdr-agent-8.1-release-information/addressed-issues-in-cortex-xdr-agent-8.1.x.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.