MDE Linux - RHEL 7.x - March-2024 Build: 101.24022.0001 | Release version: 30.124022.0001.0

[Exitwounds]

Anyone experiencing high CPU and high memory loads when using the following MDE Linux build:

• March-2024 Build: 101.24022.0001 | Release version: 30.124022.0001.0

We have noticed 35x RHEL 7.9 application servers that upgraded from March-2024 Build: 101.24012.0001 | Release version: 30.124012.0001.0 |to| March-2024 Build: 101.24022.0001 | Release version: 30.124022.0001.0 experiencing high CPU and high memory loads after 24-36 hours. A quick fix has been to downgrade to the 101.24022.0001 version.

We have engaged MS Support. However, we are all stumped on the root cause and were curious if anyone else has experienced any issues with the current MDE Linux build.

[#2]

An update:
The Microsoft Support team and the product team for MDE stated there is an issue on Linux operating systems where the latest MDE build (101.24012.0001) locks deleted files. The quick fix is to restart the MDATP service to release the locks or to downgrade to the previous build (101.24022.0001).

The internal Microsoft tracking is:
https://portal.microsofticm.com/imp/v3/incidents/details/492387071/home