MSRC-CVE-2025-59497 — Microsoft Defender for Linux Denial of Service Vulnerability

Summary

Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to win a race condition.

Security updates
101.25032.0010 — https://learn.microsoft.com/en-us/defender-endpoint/linux-whatsnew#april-2025-build-101250220002--release-version-3012502200010

Vulnerabilities 1

High 7.0

CVE-2025-59497

Microsoft Defender for Linux Denial of Service Vulnerability

Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Linux allows an authorized attacker to deny service locally.

Microsoft Microsoft Defender for Endpoint for Linux Linux

Oct 14, 2025

Revision history

2025-10-14 #1
Information published.

References

CVE-2025-59497 Microsoft Defender for Linux Denial of Service Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59497
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss