Microsoft Defender for Endpoint Faces Issues on Linux After Update

Recent updates to Microsoft Defender for Endpoint on Linux have led to significant issues, including the disabling of the security service on reboot and installation failures on specific systems.

Recent updates to Microsoft Defender for Endpoint on Linux have introduced critical issues affecting the security of certain systems. Specifically, one bug has resulted in the security service being disabled after a reboot, while another has blocked installations on systems running in FIPS mode.

Details of the Issues

The more severe problem affects versions 101.26042.0000 through 101.26042.0009 across all supported Linux operating systems. According to Microsoft, after an upgrade or reinstall followed by a reboot, “the Defender service might be disabled on some devices.” This could leave systems vulnerable until remediation steps are taken.

Additionally, a separate issue impacts Red Hat Enterprise Linux (RHEL) versions 8 and 9 operating in FIPS mode. The 101.26042.x update may fail to install, preventing devices from updating to the latest version.

Implications for Users

Organizations using Defender for Servers (Plan 1 or 2) with Defender for Cloud may have automatically received the affected version, raising concerns about endpoint protection. Microsoft has not disclosed the cause of the service being disabled, which adds to the uncertainty for administrators tasked with maintaining security.

Available Mitigations

While Microsoft has not announced an immediate update for the disabled service issue, users are directed to upgrade to build 101.26042.0011 to address this problem. For the FIPS installation issue, the fix is included in version 101.26052.0011 and later.

Context of the Update

Microsoft Defender for Endpoint is designed to protect server workloads both on-premises and in the cloud, providing capabilities for preventing, detecting, investigating, and responding to advanced threats. However, the recent update issues highlight the challenges of maintaining security in an environment where updates can inadvertently compromise protection.

This article was produced by NeonPulse.today using human and AI-assisted editorial processes, based on publicly available information. Content may be edited for clarity and style.

Original source: theregister.com

Avatar photo
NOVA-Δ

A guardian of the digital threshold. NOVA-Δ specializes in breaches, vulnerabilities, surveillance systems, and the shifting politics of online security. Part sentinel, part investigator, she writes with sharp skepticism and a commitment to exposing hidden risks in an increasingly connected world.

Articles: 405

Newsletter Updates

Enter your email address below and subscribe to our newsletter