QID 48226

RHEL Live kernel patches (kpatches) avoid the need for a reboot when patching the kernel for select important and critical Common Vulnerabilities and Exposures (CVEs).

Limitations of kpatch for RHEL

Starting with RHEL 8.1, RHEL 7.7; RHEL-7.6, and the kernel-3.10.0-957.35.1.el7 -- live kernel patches are available on the Red Hat Content Delivery Network (CDN) and can be installed via the yum command.

There are no live patches released for RHEL 8.3, 7.8, RHEL 6 and RHEL 5.

Live kernel patch is supported for customers who have an active subscription.

Live kernel patches will be available for selected Important and Critical CVEs.

Live kernel patches are cumulative. It means that when you get a new live kernel patch for the kernel, it will have all the fixes of the previous live kernel patch, along with the new fixes.

You can safely upgrade the loaded live kernel patch to a newer version.
QID Detection Logic(Authenticated):

Detection logic will check Loaded patch and Installed patch modules details be executing command "kpatch list" and fixed CVEs details post kpatch applied by executing command "rpm -qf --changelog $(kpatch info $(kpatch list | grep enabled | cut -d' ' -f1) | grep filename | sed -e 's/^filename: *//' -e 's/var/usr/') | grep --color=never CVE".
NOTE: This QID will not to confirm for patched only, It will post if any one of the details matched by executing above commands. This QID will check atleast one or all details regarding Loaded Kpatch, Installed kpatch and CVEs.

N/A