QID 45568

kpatch is a feature of the Linux kernel that implements live patching of a running kernel, which allows kernel patches to be applied while the kernel is still running. By avoiding the need for rebooting the system with a new kernel that contains the desired patches, kpatch aims to maximize the system uptime and availability.
QID Detection Logic (Authenticated)(Alibaba Cloud Linux):

This QID will check the Fixed CVEs post kpatch applied by executing command- livepatch-mgr list --installed --running.
QID Detection Logic (Authenticated)(Suse Linux):

This QID will detect livepatch, kernel-livepatch versions, fixed CVEs ,bug fixes and enhancements ID post live patch applied.
This QID will execute command for Linux enterprise server prior to 15 - " kgr -v patches"
This QID will execute command for Linux enterprise server 15 and later- " klp -v patches"
QID Detection Logic(Authenticated):(RHEL Linux)

Detection logic will check Loaded patch and Installed patch modules details be executing command "kpatch list" and fixed CVEs details post kpatch applied by executing command "rpm -qf --changelog $(kpatch info $(kpatch list | grep enabled | cut -d' ' -f1) | grep filename | sed -e 's/^filename: *//' -e 's/var/usr/') | grep --color=never CVE".
NOTE: This QID will check kpatch for only RHEL, SUSE and Alibaba cloud Linux.

NA