Today, system administrators are required to reboot servers to apply latest kernel updates, which are needed to prevent security issues. Yet, due to downtime associated with the reboot, such updates are often delayed – and pushed into the darkest hours of the night. KernelCare solves this update & reboot issue by providing automated kernel security updates without reboots for most popular Linux distributions. It ensures optimal performance and uptime by allowing hosting providers and enterprises to keep kernels up-to-date with all security patches while keeping servers online.
KernelCare technology can generate binary patches for some very complex kernel changes, including changes in kernel modules and kernel data structures. It can patch any kernel level vulnerability, so server operators no longer have to think about kernel updates.
Minutes to setup
Installation is simple, and doesn’t require rebooting.
Support for most popular operating systems
KernelCare supports CentOS/RHEL 5, 6 and 7, CloudLinux 5 and 6, OpenVZ, Virtuozzo, PCS, Debian 6 and 7 and Ubuntu 14.04. Other kernels will follow.
Prompt patches roll out
Kernel team monitors security mailing lists. Once they notice that there is a security vulnerability that affects one of the supported kernels – they prepare a patch for that vulnerability.
No performance impact
KernelCare loads patches using a special kernel module with no impact on system performance since those take only nanoseconds.
Ability to roll back changes
You can always roll back all applied changes by running the special command.