diff --git a/defender-endpoint/linux-support-ebpf.md b/defender-endpoint/linux-support-ebpf.md index f38ebc1fa7..620c109a5f 100644 --- a/defender-endpoint/linux-support-ebpf.md +++ b/defender-endpoint/linux-support-ebpf.md @@ -15,7 +15,7 @@ ms.collection: ms.topic: conceptual ms.subservice: linux search.appverid: met150 -ms.date: 08/22/2024 +ms.date: 09/07/2024 --- # Use eBPF-based sensor for Microsoft Defender for Endpoint on Linux @@ -62,6 +62,10 @@ The eBPF sensor for Microsoft Defender for Endpoint on Linux is supported on the | Oracle Linux RHCK | 7.9 | 3.10.0-1160 | | Oracle Linux UEK | 7.9 | 5.4 | | Amazon Linux 2 | 2 | 5.4.261-174.360| +| Rocky Linux 8 | 8.7 | 4.18.0-425 | +| Rocky Linux 9 | 9.2 | 5.14.0-284 | +| Alma Linux 8 | 8.4 | 4.18.0-305 | +| Alma Linux 9 | 9.2 | 5.14.0-284 | > [!NOTE] > Oracle Linux 8.8 with kernel version 5.15.0-0.30.20.el8uek.x86_64, 5.15.0-0.30.20.1.el8uek.x86_64 will result in kernel hang when eBPF is enabled as supplementary subsystem provider. This kernel version should not be used for eBPF mode. Refer to Troubleshooting and Diagnostics section for mitigation steps.