[kpatch] Preparing a patch - pitfalls

Evgenii Shatokhin eshatokhin at odin.com
Fri Sep 25 18:51:36 UTC 2015


Hi,

In the presentation about using Kpatch in RHEL 7, Seth Jennings mentions 
the following:

  "The patches in the upstream kernel to fix CVEs are not designed to be 
applied at runtime. There are certain pitfalls that need to be checked 
for when generating a live patch."

Could you elaborate? What are these pitfalls that should be checked for 
when preparing a Kpatch-based patch? What kind of analysis should be done?

Thanks in advance.

Regards,
Evgenii




More information about the kpatch mailing list