Microsoft Defender for Linux TOCTOU Race Condition Vulnerability Leading to Denial-of-Service

A time-of-check time-of-use (TOCTOU) race condition vulnerability has been identified in Microsoft Defender for Linux. This vulnerability allows an authorized attacker to cause a local denial-of-service condition. The issue arises from a race condition that can be exploited by manipulating the timing of events, potentially leading to service disruption.

Impact

Exploitation of this vulnerability causes a local denial-of-service condition, disrupting the normal operation of the affected service or application.

Remediation

Users can download the security update for Microsoft Defender for Endpoint for Linux from the Microsoft Defender for Endpoint Linux Updates page. The vulnerability is addressed in version 101.25032.0010.