CloudLinux - KernelCare News - CloudLinux Blog - Page 4
RSS
KernelCare protection against Rowhammer privilege escallation

KernelCare protection against Rowhammer privilege escallation

KernelCare protection against Rowhammer privilege escallation
The rmemory hardware issue " Rowhammer " was recently discovered to allows privileged escalation. The issue can be mitigated (at least in its current form) by preventing user from reading /proc/$(pid)/pagemap, /proc/kpageflags, /proc/kpagecount files. Yet, this protection is not available from RedHat, CentOS, Parallels. It is not available as part ...
Continue reading
  2710 Hits
  0 Comments
KernelCare: How does it work?

KernelCare: How does it work?

KernelCare: How does it work?

Rebooting is a pain

Rebooting server is a pain. It is often scheduled for the darkest of the night. It requires minutes of downtime, and it can take up to 15 minutes for the server performance to stabilize, and catches to warm up. This is not something you want to do often.Yet, any time there is a security vulnerability in the kernel, a server should be rebooted. This is where KernelCare comes in. It provides a service that will patch security vulnerabilities inside the running kernel - without any downtime or service interruption.

Continue reading
  5616 Hits
  0 Comments

KernelCare support for Ubuntu 14.04 LTS (Trusty Tahr) added

We have added KernelCare support for Ubuntu 14.04 LTS (Trusty Tahr) As of now we support: RHEL/CentOS 5, 6 & 7 CloudLinux 5, 6, 5hybrid Debian 6, 7 Ubuntu 14.04
  3092 Hits
  0 Comments

KernelCare local privilege escalation patch for PCS/OpenVZ/CL6/CL5h/CentOS6/RHEL6 CVE-2014-9322

This update includes patch for CVE-2014-9322 vulnerability. I am sorry about unusual delay with this patch. This patch was the most complex patch we have seen so far. It was in assembler code, while most patches are in C. It was altering how interrupt handlers work. It is highly unusual, and there were no such security patches in the past 3 years. ...
Continue reading
  2008 Hits
  0 Comments

KernelCare CVE-2014-9322 patch

Update: The patch has been released on Dec 18, 2014 at 1pm ET. You can read more about it here: http://www.cloudlinux.com/blog/clnews/kernelcare-local-privilege-escalation-patch-for-pcsopenvzcl6cl5hcentos.php We have received numerous requests for CVE-2014-9322 patch. Right now we are running burn in tests that should finish in a few hours. This pa...
Continue reading
  2179 Hits
  0 Comments

We're looking for KernelCare testimonials

If you are using KernelCare, you can help us. We are looking for KernelCare testimonials to display on our kernelcare.com website. We need: Your name & title Your picture Company name Few sentences about how you are using KernelCare, and why you like it. Please, send testimonials to This email address is being protected from spambots. You need JavaScript enabled to view it. Your help is greatly appreciated.
  1594 Hits
  0 Comments
Tags:

Meet us at WHD.india or WHD.asia

We will be exhibiting this year at WHD.india and WHD.asia. If you will be there -- make sure to stop by. I will be showing off latest version of CageFS and LVE, including IO limits and physical memory limits. If you are yet to register, you can use following codes to register for free here: http://www.worldhostingdays.com/ WHD.asia: MG31VQU47 WHD.i...
Continue reading
  2111 Hits
  0 Comments