Zombie Process

A Zombie Process is a process in Unix or Linux that has completed execution but still remains in the process table. It is also known as a defunct process. Although the process is no longer running, its entry persists until the parent process reads its exit status.

Zombie processes do not consume CPU or memory resources (beyond the small entry in the process table), but a large number of them can indicate a problem and eventually exhaust system resources.

How Zombie Processes Occur

• When a child process finishes, it sends an exit status to the parent.
• The operating system keeps the process in the process table in a "zombie" state until the parent collects the status (via wait() or similar system calls).
• If the parent fails to collect this status, the zombie remains.

Identifying Zombie Processes

Zombie processes can be identified using commands like:

ps aux | grep 'Z'

In the process list, zombies appear with a Z (zombie) in the status column, often marked as <defunct>.

Handling Zombie Processes

• Wait for cleanup – Normally, well-written parent processes reap children automatically.
• Terminate or restart parent process – If the parent does not collect exit statuses, killing or restarting it often removes the zombie.
• Re-parenting – If the parent dies, zombies are adopted by init (PID 1), which reaps them automatically.

Example Scenario

1. A web server spawns multiple worker processes.
2. One worker completes, but the server fails to call wait() to collect the exit code.
3. The worker remains as a zombie in the process table.

Risks of Zombie Processes

• Resource exhaustion – Too many zombies can fill the process table.
• Indicator of bugs – Persistent zombies suggest problems in application code or process management.

Conclusion

Zombie processes are normal and harmless in small numbers, but a buildup signals a potential software issue. Proper process management and cleanup ensure that finished processes are correctly reaped, preventing resource exhaustion.