--- title: "Trellix Endpoint Security (ENS) for Linux 10.7.22 July Kernel Update" slug: "trellix-endpoint-security-ens-for-linux-10-7-22-july-kernel-update" tags: ["Release Notes", "ENS 10.7.x"] updated: 2026-10-07T19:44:29Z published: 2026-10-07T19:44:29Z canonical: "docs.trellix.com/trellix-endpoint-security-ens-for-linux-10-7-22-july-kernel-update" --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.trellix.com/llms.txt > Use this file to discover all available pages before exploring further. # Trellix Endpoint Security (ENS) for Linux 10.7.22 July Kernel Update The Trellix Endpoint Security (ENS) for Linux 10.7.22 July release update supports additional kernels. ### Release details Install these kernels as a fresh installation or upgrade from Trellix ENS for Linux 10.7.x. Release package: `McAfeeESP-KernelModule-10.7.22-5979-Release-ePO.zip` | If you have | You must | | --- | --- | | Trellix ENS for Linux 10.7.5 or later deployed on your managed systems | Update Trellix ENS for Linux 10.7.22 with the `McAfeeESP-KernelModule-10.7.22-5979-Release-ePO` kernel package to Trellix ePO - On-prem. | | Trellix ENS for Linux 10.7.5 or later checked in to Trellix ePolicy Orchestrator - On-prem | Update `McAfeeESP-KernelModule-10.7.22-5979-Release-ePO` kernel package from Trellix ePO - On-prem. | | If Trellix ENS for Linux 10.7.5 or earlier versions is checked in and deployed on managed systems | Check in and install Trellix ENS for Linux 10.7.22 with the `McAfeeESP-KernelModule-10.7.22-5979-Release-ePO` kernel package on Trellix ePO - On-prem. | ### Supported additional kernel versions This release supports these additional kernels: - Amazon Linux 2023 - 6.1.168-202.320.amzn2023 - 6.1.172-216.329.amzn2023 - 6.1.166-197.305.amzn2023 - 6.1.172-216.329.amzn2023.aarch64 - Amazon Linux 2 - 5.15.204-143.229.amzn2.x86_64 - 5.15.208-145.238.amzn2.x86_64 - 5.10.253-251.1014.amzn2.x86_64 - 5.10.253-252.1015.amzn2.x86_64 - 5.10.255-253.1008.amzn2.x86_64 - 5.10.255-253.1013.amzn2.x86_64 - 5.10.257-254.1015.amzn2.x86_64 - 5.15.206-144.232.amzn2.x86_64 - 5.15.206-144.236.amzn2.x86_64 - 5.15.206-144.232.amzn2.aarch64 - Linux Mint 21 - 5.15.0-176-generic - 5.15.0-177-generic - 5.15.0-179-generic - 5.15.0-181-generic - Ubuntu 20.04 - 5.15.0-173-generic - 5.15.0-176-generic - 5.15.0-177-generic - 5.15.0-179-generic - 5.15.0-181-generic - Ubuntu 22.04 - 5.15.0-43-generic - 5.15.0-181-generic - 6.8.0-40-generic - 6.8.0-124-generic - Ubuntu 24.04 - 6.8.0-124-generic - Oracle 7 - 5.4.17-2136.333.1.el7uek.x86_64 - Oracle 8 - 5.15.0-320.202.8.5.el8uek.x86_64 - 5.15.0-320.202.8.2.el8uek.x86_64 - 5.15.0-321.202.5.el8uek.x86_64 - 5.4.17-2136.353.3.el8uek.x86_64 - Oracle 9 - 5.15.0-320.202.8.5.el9uek.x86_64 ### Known issues For a list of current known issues in Threat Prevention, see Trellix Knowledge Base article [KB87518](https://thrive.trellix.com/s/article/KB87518). For a list of current known issues in Firewall, see Trellix Knowledge Base article [KB91327](https://thrive.trellix.com/s/article/KB91327). ### Additional Information #### Upgrade from Trellix Endpoint Security (ENS) for Linux 10.7.5 or earlier versions Upgrade to Trellix ENS for Linux 10.7.22 with Trellix ENS for Linux 10.7.22 Kernel Modules for Linux kernel package from Trellix ENS for Linux 10.7.5 or earlier versions. Before installing or upgrading: - Make sure to update the Msgbus Cert Updater package to the latest available version. - The Msgbus Cert Updater package is available on **Software Catalog** under the Trellix Agent. Download Trellix ENS for Linux 10.7.22 Kernel Modules for Linux from Software Catalog in the same branch as `McAfeeTP-<version number>-<build number>-Release-ePO`. > [!NOTE] > Note > > Make sure that you select the version number 10.7.5 or later. A message displays for overwriting the package. Click **OK** to check in the package. 1. Log on to the Trellix ePO - On-prem server as an administrator. 2. Select **Menu** → **Systems** → **System Tree**, then select a group or systems. 3. On the **Assigned Client Tasks** tab, click **Actions**, then click **New Client Task Assignment**. 4. Complete these options, then click **Create New Task**: 1. For product, select Trellix Agent. 2. For task type, select **Product Deployment**. 5. On the **Client Task Catalog** page: 1. Enter a task name. 2. Select **Linux** as the target platform. 3. In **Products and components**, select the product, select **Install** as the action, then click **Save**. 6. Select the **Schedule** type as **Run immediately** and click on **Save**. The new task appears under the tasks list. 7. Select the machines where the update has to run. Click on Wake Up Agents. Wait for the task to get completed. You can verify the kernel versions on the managed systems using the command **lsmod**. #### Check in Trellix Endpoint Security (ENS) for Linux 10.7.22 kernel package Check in Trellix ENS for Linux with 10.7.22 with the `McAfeeESP-KernelModule-10.7.22-<build number>-Release-ePO` kernal package. Make sure you check in `McAfeeESP-KernelModule-10.7.22-<build number>-Release-ePO` package to Trellix ePO - On-prem in the same branch as `McAfeeESP-<version number>-<build number>-` package. > [!NOTE] > Note > > Make sure that you select the version number 10.7.5 or later. A message displays for overwriting the package. Click **OK** to check in the package. 1. Download the .zip file from the Trellix download site to a temporary location on the Trellix ePO - On-prem server. 2. Log on to the Trellix ePO - On-prem server as an administrator. 3. Select Select **Menu** → **Systems** → **Main Repository** → **Check In Package.**. 4. For Package type, select **Product or Update (.ZIP)**. 5. Click **Choose File**, select `McAfeeESP-KernelModule-<version>-<build number>` , click **Choose**, then click **Next**. 6. Click **Choose File**, select `McAfeeTP-KernelModule-<version>-<build number>-Release-ePO.zip` , click **Choose**, then click **Next**. 7. Select **Current** as the branch. 8. Click **Save**. You can verify the kernel versions on the managed systems using the command **lsmod**. #### Update Trellix Endpoint Security (ENS) for Linux with latest kernel packages Update Trellix ENS for Linux 10.7.22 with Trellix Endpoint Security (ENS) 10.7.22 Kernel Modules for Linux kernel package. - You must download Trellix ENS for Linux for Threat Prevention 10.7.5 or later from **Software Catalog**. - Make sure you download Trellix ENS for Linux 10.7.22 Kernel Modules from Software Catalog in the same branch as `McAfeeTP-KernelModule-<version>-<build number>-Release-ePO` . > [!NOTE] > Note > > Make sure that you select the version number 10.7.5 or later. A message displays for overwriting the package. Click **OK** to check in the package. 1. Log on to the Trellix ePO - On-prem server as an administrator. 2. Select **Menu** → **Systems** → **System Tree**, then select a group or systems. 3. On the **Assigned Client Tasks** tab, click **Actions**, then click **New Client Task Assignment**. 4. Complete these options, then click **Create New Task**: 1. For product, select **Trellix Agent**. 2. For task type, select **Product Update**. 5. Enter the Task name and check in Trellix Endpoint Security (ENS) Kernel Modules for Linux 10.7.22 under package types. Uncheck all other boxes and click Save. 6. Select the Schedule type as **Run immediately** and click on Save. The new task appears under the tasks list. 7. Select the machines where the update has to run. Click on **Wake Up Agents**. Wait for the task to get completed. You can verify the kernel versions on the managed systems using the command **lsmod**. #### Upgrade standalone rpm machines with the latest kernel package Upgrade your RPM systems with the `McAfeeESP-<version number>-<build number>--Release-ePO` kernel package using command line. You must have Trellix ENS for Linux Threat Prevention 10.7.5 or later installed and running on your system. 1. Copy `McAfeeESP-<version number>-<build number>--Release-ePO` on to your machine. 2. Unzip the package: unzip `McAfeeESP-<version number>-<build number>--Release-ePO -d kernel_module` . 3. Run these commands to upgrade the kernel module. *For version 10.7.17 or earlier* ``` cd kernel_module mkdir aac_fileaccess tar -zxvf McAfeeESP-KernelModule-10.7.22--Full.linux.tar.gz -C aac_fileaccess mkdir /tmp/ens_pkg/ mkdir /tmp/ens_pkg/install/ cd aac_fileaccess cp McAfeeESPAac-10.7.22-.x86_64.rpm McAfeeESPFileAccess-10.7.22- .x86_64.rpm /tmp/ens_pkg/install/ yum -y --nogpgcheck --noplugins --disablerepo=* install /tmp/ens_pkg/install/*.rpm     /opt/McAfee/ens/tp/init/mfetpd-control.sh stop /opt/McAfee/ens/tp/init/mfetpd-control.sh start lsmod | grep mfe --> shows 100706 version of kernel module rpm -qa | grep -i mcafee --> shows aac and fileaccess version 10.7.22. ``` *For version 10.7.18 or later* ``` cd kernel_module ./update-esp-kernelmodule.sh lsmod | grep -i mfe rpm -qa | grep -i mcafee --> shows aac and fileaccess version 10.7.22. ``` #### Upgrade Debian machines with the latest kernel package Upgrade your Debian systems the `McAfeeESP-<version number>-<build number>--Release-ePO` kernel package using command line. You must have Trellix ENS for Linux Threat Prevention 10.7.5 or later installed and running on your system. 1. Copy `McAfeeESP-<version number>-<build number>--Release-ePO` on to your machine. 2. Unzip the package: unzip `McAfeeESP-<version number>-<build number>--Release-ePO -d kernel_module` . 3. Run these commands to upgrade the kernel module. *For version 10.7.17 or earlier* ``` cd kernel_module mkdir aac_fileaccess tar -zxvf McAfeeESP-KernelModule-10.7.22--Full.linux.tar.gz -C aac_fileaccess cd aac_fileaccess dpkg --install McAfeeESPAac-10.7.22-.deb dpkg --install McAfeeESPFileAccess-10.7.22-.deb /opt/McAfee/ens/tp/init/mfetpd-control.sh stop /opt/McAfee/ens/tp/init/mfetpd-control.sh start lsmod | grep -i mfe --> shows 100706 version dpkg-query -l | grep -i mcafee --> shows aac and fileaccess version -> 10.7.22- ``` *For version 10.7.18 or later* ``` cd kernel_module ./update-esp-kernelmodule.sh lsmod | grep -i mfed pkg-query -l | grep -i mcafee --> shows aac and fileaccess version -> 10.7.22- ```