Linux - NewsThis forum is for original Linux News. If you'd like to write content for LQ, feel free to contact us.
All threads in the forum need to be approved before they will appear.
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
Distribution: Debian, Red Hat, Slackware, Fedora, Ubuntu
Posts: 13,600
Rep:
Live Kernel Patching Update
Quote:
In the year since I first wrote about kpatch, Red Hats live kernel patching project for Linux, weve been very busy. Here are some of the highlights from the last year of live kernel patching development, and some clues about where we may be headed in the future.
The kpatch development team worked at a feverish pace in 2014. We fixed 95 issues and merged 376 pull requests. We also grew into a strong community. Some of my favorite highlights:
The addition of support for safely patching data structures.
A markedly improved percentage of patches that can be applied to a running kernel. For example, in a recent test of 40 kernel CVE fixes, we were able to live patch all 40 of them, for a 100 patch compatibility rate!
The porting of kpatch to many distributions, including Red Hat Enterprise Linux, Fedora, CentOS, Ubuntu, Debian, and Oracle Linux.
The addition of support for patching kernel modules.
The creation of a large integration test suite.
The addition of support for the upstream livepatch project (more on this below).
The incorporation of many stability, performance and usability improvements.
And last but not least the amazing contributions from 14 people, most of whom were not Red Hat employees!
To see some of the impressive things that kpatch can do, I encourage you to check out the following short demo from Seth Jennings
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.