CloudLinux - KernelCare News - CloudLinux Blog - Page 2
RSS

Issues caused by the latest KernelCare update

We’ve received reports that our latest patchset affected some CentOS/CloudLinux/OpenVZ 6 kernels. We’ve immediately rolled back the patch, have evaluated the issue and identified the cause to prevent issues in the future releases. Please accept our apologies and standby for additional updates on the cause of the issue.Igor Seletskiy
  3388 Hits
  0 Comments
The KernelCare Update: The patch to fix CVE-2016-8655 exploit is here!

The KernelCare Update: The patch to fix CVE-2016-8655 exploit is here!

The KernelCare Update: The patch to fix CVE-2016-8655 exploit is here!
A new vulnerability CVE-2016-8655 in the Linux kernel was discovered yesterday by Philip Pettersson. It is a race-condition in Linux (net/packet/af_packet.c) that can be exploited to gain kernel code execution from unprivileged processes. This exploit may lead to a privilege escalation, cause a denial of service attacks (server crash) and informati...
Continue reading
  5232 Hits
  0 Comments
New vulnerability discovered - the fix for CVE-2016-8655 for CloudLinux OS 7 is here with KernelCare

New vulnerability discovered - the fix for CVE-2016-8655 for CloudLinux OS 7 is here with KernelCare

New vulnerability discovered - the fix for CVE-2016-8655 for CloudLinux OS 7 is here with KernelCare
The patch for CloudLinux OS 7 is here if you are running KernelCare. Fixed CloudLinux OS 7 kernel is coming soon. CloudLinux OS 5 & 6 are not affected.A new vulnerability CVE-2016-8655 in the Linux kernel was discovered by Philip Pettersson. It is a race-condition in Linux (net/packet/af_packet.c) that can be exploited to gain kernel code execu...
Continue reading
  4951 Hits
  0 Comments
Managing KernelCare with Puppet

Managing KernelCare with Puppet

Managing KernelCare with Puppet
By guest author Christian ReißIf you haven’t felt it before: when Dirty Cow hit you did. The Linux Kernel is rock solid, proven but also has security issues. In this case: Root rights for everyone! And on top of that this bug is so trivially easy to exploit (several proof-of-concepts are out there that can easily converted into a life, working gun)...
Continue reading
  5949 Hits
  0 Comments

KernelCare, Dirty Cow, systemtap and CentOS/RHEL/CL 5 - Important!!!

The systemtap scripts recommended by RedHat https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13 and many other people as workaround against CVE-2016-5195 (a.k.a DirtyCow) might be ineffective against new variations of the attack like this one:https://github.com/dirtycow/dirtycow.github.io/blob/master/pokemon.c[correction Oct 22, 7:04am: this pa...
Continue reading
  4477 Hits
  0 Comments
How to use a single key to register multiple KernelCare servers
Tags:

How to use a single key to register multiple KernelCare servers

How to use a single key to register multiple KernelCare servers
KernelCare is often deployed on a large number of servers. Adding those servers one by one is a hassle. In that case, KernelCare key can be used to deploy and register multiple servers at once.Registration is still straightforward:$ kcarectl --register YOUR_KEYThe key can be obtained from CLN (see image above).The same key can be used for all the s...
Continue reading
  10073 Hits
  0 Comments
KernelCare supports many distributions, but does it work with your kernel?

KernelCare supports many distributions, but does it work with your kernel?

KernelCare supports many distributions, but does it work with your kernel?
We often get a question whether a particular kernel is supported by KernelCare. We support a large number of distributions and kernel versions, such as CentOS/RHEL/CL 5,6 & 7, Debian, Ubuntu, Virtuozzo & Proxmox VE. List of all supported distributions, kernels, as well as patches for them is available at http://patches.kernelcare.com.Yet, t...
Continue reading
Recent Comments
Guest — Michael Dance
Nice script Igor .
Thursday, 21 April 2016 20:57
Guest — Mr. Nam
Hello, I can't install kernelcare for my server is running Cloudlinx 7.2. Please check again. # wget -qq -O - https://raw.githubus... Read More
Saturday, 23 April 2016 07:19
WisiKlo WisiKlo
Please, try now. This has been fixed.
Saturday, 23 April 2016 17:50
  20321 Hits
  24 Comments
Debian 7 & 8 kernels patched to latest with KernelCare

Debian 7 & 8 kernels patched to latest with KernelCare

Debian 7 & 8 kernels patched to latest with KernelCare
Debian 7 kernels updated to linux-3.2.73-2+deb7u3Debian 8 kernels updated to linux-3.16.7-ckt20-1+deb8u4 Systems with AUTO_UPDATE=True (DEFAULT) in /etc/sysconfig/kcare/kcare. conf will automatically update, and no action is needed for them.You can manually update the server by running:# /usr/bin/kcarectl --updateChangelog:debian7:&n...
Continue reading
  5854 Hits
  0 Comments
KernelCare prevents from attacks fast - releases patches sometimes even before the native OS updates its kernel
Tags:

KernelCare prevents from attacks fast - releases patches sometimes even before the native OS updates its kernel

KernelCare prevents from attacks fast - releases patches sometimes even before the native OS updates its kernel
You might say that KernelCare lags slightly behind the upstream distributions of patches. This, however, is normal, and regardless of the delay, most of the time you will be protected by KernelCare much faster than you would do the reboot yourself. The main cause of such delay is that upstream does not disclose the vulnerability until updated kerne...
Continue reading
  4403 Hits
  0 Comments
KernelCare fan-base is growing as we reach 50,000 server installs
Tags:

KernelCare fan-base is growing as we reach 50,000 server installs

KernelCare fan-base is growing as we reach 50,000 server installs
I cannot say that I am not proud of the fact that our customer install base has grown so substantially. In the past year, KernelCare has more than tripled server installs and is still CloudLinux’s fastest growing product. Companies like Dell and LiquidWeb have deployed KernelCare to keep thousands of their Linux servers secure with all the latest k...
Continue reading
Recent comment in this post
Guest — 1uhost.com
Thanks and congratulations Igor
Thursday, 10 March 2016 21:23
  4499 Hits
  1 Comment