The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages expected in early November 2026. We hope you enjoy the updated experience.

Press CTRL+K to open search

Trellix Endpoint Security (ENS) 10.7.22 - Release Notes - Linux

  • Published on Oct 7, 2026
  • 2 minute(s) read
Prev Next

Rating

The rating defines the urgency for installing this update.

This release is recommended for all environments. Apply this update at the earliest convenience.

For more information, see KB51560

New features and enhancements

  • Password protection for uninstall

    Allows you to prevent unauthorized uninstallation of Trellix Endpoint Security for Linux Threat Prevention (ENSL TP) and Firewall (FW) on systems managed by Trellix ePolicy Orchestrator (ePO).To enforce this protection, the ENS Common policy must be configured with a password for the uninstall function. ENSL TP and FW will then require this password for authentication before removal from the Linux system.

  • Additional information for Access Protection events

    Access Protection events have been enhanced to include the Access Requested field and other access protection-specific fields. These additions improve visibility into Access Protection rule violations.

  • OpenSSL update

    The OpenSSL library has been upgraded to version 1.0.2zm. This update ensures the product gains the latest security patches and improvements that the OpenSSL project provides.

  • Bundled with Engine 6820

    Trellix Endpoint Security (ENS) for Linux is bundled with Engine 6820 to provide enhanced security.

Release details

Trellix Endpoint Security (ENS) for Linux 10.7.22 includes feature enhancements, resolved issues and known issues.

This release is cumulative and includes all features and fixes from the previous release. We recommend that you always upgrade to the most current update.

Resolved issues

Reference

Resolution

ESFL-8097

Resolves an issue for segmentation (segfault) in mfetpd when an exception occurred during the policy read process for the Global Threat Intelligence (GTI) feature.

ESFL-8009

Resolves a double-free issue by clearing pointers (setting them to NULL) after freeing legacy match-engine data.

ESFL-7842

Resolves an issue where Endpoint Security interface validation logic failed to correctly detect and initialize bonded network configurations. The logic has been enhanced to correctly include logical interfaces, such as bond0 and bond1, ensuring accurate initialization.

ESFL-7778

The warning message "Voluntary context switch within RCU read-side critical section" will no longer be displayed.

ESFL-6599

ODS Stop Requests initiated from ePO are now consistently honored. Previously, if an on-demand scan encountered an unavailable or unresponsive NFS mount, the scan could hang and fail to process the stop request, leaving it running indefinitely. This issue has been resolved, ensuring that scans reliably receive and act on stop signals even when NFS mounts are unavailable.

Known issues

For a list of current known issues in Threat Prevention, see Trellix Knowledge Base article KB87518.

For a list of current known issues in Firewall, see Trellix Knowledge Base article KB91327.

Before upgrading Trellix Endpoint Security (ENS) for Linux Firewall to 10.7.21, see Trellix Knowledge Base article 000014500.

Updated platform, environment, or operating system support

This release includes additional kernel support. You can get the latest information about supported platforms, environments, and operating systems from the following links:

  • Trellix Endpoint Security (ENS) for Linux Threat Prevention 10.7.x from KB87073

  • Trellix Endpoint Security (ENS) for Linux Firewall 10.7.x from KB91326

This release supports these additional kernel modules:

  • Oracle 8

    • 5.15.0-310.184.5.2.el8uek.x86_64

    • 5.15.0-311.185.9.el8uek.x86_64

    • 5.15.0-312.187.5.2.el8uek.x86_64

    • 5.15.0-312.187.5.3.el8uek.x86_64

    • 5.15.0-313.189.5.1.el8uek.x86_64

    • 5.15.0-313.189.5.3.el8uek.x86_64

    • 5.15.0-313.189.5.2.el8uek.x86_64

    • 5.15.0-314.193.5.4.el8uek.x86_64

    • 5.15.0-314.193.5.3.el8uek.x86_64

  • Amazon Linux 2

    • 5.15.186-128.192.amzn2.x86_64

    • 5.15.187-130.192.amzn2.x86_64

    • 5.10.239-236.958.amzn2.x86_64

    • 5.10.240-238.955.amzn2.x86_64

    • 5.10.240-238.959.amzn2.x86_64

    • 5.4.299-219.434.amzn2.x86_64

    • 5.4.301-221.445.amzn2.x86_64

    • 5.15.191-132.213.amzn2.x86_64

    • 5.15.193-133.214.amzn2.x86_64

    • 5.15.191-132.213.amzn2.aarch64

    • 5.15.193-133.214.amzn2.aarch64

    • 5.15.186-128.192.amzn2.aarch64

  • Amazon Linux 2023

    • 6.1.141-165.249.amzn2023.x86_64

    • 6.1.147-172.259.amzn2023.x86_64

    • 6.1.147-172.266.amzn2023.x86_64

    • 6.1.150-174.273.amzn2023.x86_64

    • 6.1.153-175.280.amzn2023.x86_64

    • 6.1.156-177.286.amzn2023.x86_64

    • 6.1.156-177.286.amzn2023.aarch64

    • 6.1.150-174.273.amzn2023.aarch64

    • 6.1.153-175.280.amzn2023.aarch64

    • 6.1.140-154.222.amzn2023.aarch64

    • 6.1.141-155.222.amzn2023.aarch64

    • 6.1.144-170.251.amzn2023.aarch64

    • 6.1.147-172.259.amzn2023.aarch64

  • Ubuntu 18.04

    • 4.15.0-232-generic

  • Ubuntu 20.04

    • 5.4.0-1147-aws-fips

    • 5.15.0-152-generic

    • 5.15.0-153-generic

  • Ubuntu 22.04

    • 6.8.0-78-generic

    • 6.8.0-79-generic

    • 5.15.0-143-generic

    • 5.15.0-144-generic

    • 6.8.0-64-generic

    • 5.15.0-151-generic

    • 6.8.0-65-generic

    • 6.8.0-1033-aws

    • 5.15.0-153-generic

    • 5.15.0-156-generic

    • 5.15.0-157-generic

    • 5.15.0-160-generic

    • 5.15.0-161-generic

    • 6.8.0-83-generic

    • 6.8.0-84-generic

    • 6.8.0-85-generic

    • 6.8.0-86-generic

    • 6.8.0-87-generic

  • Ubuntu 24.04

    • 6.11.0-28-generic

    • 6.8.0-63-generic

    • 6.11.0-29-generic

    • 6.8.0-64-generic

    • 6.8.0-71-generic

    • 6.8.0-79-generic

    • 6.8.0-83-generic

    • 6.8.0-84-generic

    • 6.8.0-85-generic

    • 6.8.0-86-generic

    • 6.8.0-87-generic

    • 6.8.0-88-generic

    • 6.14.0-24-generic

    • 6.14.0-33-generic

    • 6.14.0-34-generic

    • 6.14.0-35-generic

    • 6.14.0-36-generic

  • Ubuntu 25.04

    • 6.14.0-15-generic

  • Linux Mint 21

    • 5.15.0-143-generic

    • 5.15.0-144-generic

    • 5.15.0-152-generic

    • 5.15.0-153-generic

    • 5.15.0-156-generic

    • 5.15.0-157-generic

    • 5.15.0-160-generic

    • 5.15.0-161-generic

  • Debian 11

    • 5.10.0-36-amd64

  • Debian 12

    • 6.1.0-38-amd64

    • 6.1.0-39-amd64

    • 6.1.0-40-amd64

    • 6.1.0-41-amd64

  • Oracle 9

    • 5.15.0-311.185.9.el9uek.x86_64

    • 5.15.0-313.189.5.1.el9uek.x86_64

    • 5.15.0-313.189.5.3.el9uek.x86_64

    • 5.15.0-314.193.5.4.el9uek.x86_64

  • SLES 15 SP7

    • 6.4.0-150700.51-default

    • 6.4.0-150700.53.6-default

  • RHEL 10.1

    • 6.12.0-124.8.1.el10_1.x86_64

  • RHEL 9.7

    • 5.14.0-611.5.1.el9_7.x86_64

Additional information

On Intel architecture, you must have installed Trellix Agent 5.6.4 (Build Number 110) (64-bit) or later to use this software.

On ARM architecture, you must have installed Trellix Agent 5.8.3 (Build Number 622) (64-bit) or later to use this software.