Skip to main content

Endpoint Detection and Response (EDR) and supported Linux kernels

Note

This list is being updated regularly.

The EDR Sensor (Incidents Sensor) is supported by the following kernel versions and Linux distributions:

Supported distributions

Fully Supported Linux Modern Distributions

Distribution

Kernel versions

RHEL 7.x

3.10.0 (starting from build 957)

RHEL 8.x

4.18.0

RHEL 9x

5.14.x

Oracle Linux 7.x (UEK +RHCK)

3.10.0-957 - 4.18.0

Oracle Linux 8.x (UEK +RHCK)

3.10.0-957 - 4.18.0

CentOS 7.x

3.10.0 (starting from build 957)

CentOS 8.x

4.18.0

Debian 9

4.9.0

Debian 10

4.19

Debian 11

5.10

Ubuntu 16.04.x

4.8 / 4.10 / 4.13 / 4.15

Ubuntu 18.04.x

5.0 / 5.3 / 5.4

Ubuntu 20.04.x

5.4

Ubuntu 21.04.x

5.11

Ubuntu 21.10.x

5.13

Ubuntu 22.04.x

5.15

SLES 12 SP4

4.12.14-x

SLES 12 SP5

4.12.14-x

SLES 15 SP1

4.12.14-x

SLES 15 SP2

5.3.18-x

SLES 15 SP3

5.3.18-x

openSUSE Leap 15.2 - 15.4

5.3.18 / 5.14.x

AWS Bottlerocket 2020.03

5.4.x, 5.10.x

Amazon Linux v2

4.14.x / 4.19.x, 5.10

Google COS 

Milestones 77, 81, 85

4.19.112 / 5.4.49

Azure Mariner 2

5.15

Fedora 31 - 36

Supported until it expires.

AlmaLinux 8.x

4.18.0

AlmaLinux 9.x

5.14.x

Rocky Linux 8.x

4.18.0

CloudLinux 8.x

4.18.0

CloudLinux 7.x

3.10

Pardus 21

5.10

Linux Mint 20.3

5.4.0

Miracle 8.4

4.18.0

Supported Linux Legacy Distributions

Distribution

Kernel versions

RHEL 6.x

2.6.32-x

CentOS 6.x

2.6.32-x

Oracle Linux 6.x (6.3 or newer)

2.6.32-x

Ubuntu 16.04.x

4.4.x

Ubuntu 14.04 LTS

4.4.x  (14.04.5)

Amazon Linux v1 2018.03

4.14.x