Defender for Endpoint Linux Update Can Kill Agent on Reboot, Blocks FIPS RHEL
A recent Defender for Endpoint Linux update (build 101.26042) may disable the endpoint agent after a reboot, leaving affected machines unprotected. A second issue stops installation on FIPS‑enabled RHEL 8/9 systems. Microsoft has paused rollout and advises verification before deployment.