SOLVED Kernel version and system release don't match

rs200

Active Member
Dec 4, 2017
33
7
8
Italy
cPanel Access Level
Root Administrator
Hi,

on my VPS with cPanel and KernelCare installed i noticed that Security Advisor takes too much time to finish, especially during Cpanel::Security::Advisor::Assessors::Kernel 1.06

I checked the kernel version and this is the output

Code:
uname -s -r
Linux 3.10.0-327.4.4.el7.centos.plus.x86_64
The system release is

Code:
cat /etc/system-release
CentOS Linux release 7.6.1810 (Core)
Now why there is a difference between the kernel ver and release. CentOS 7.6 kernel version is 3.10.0-957 not 3.10.0-327 o_O

Update: when Security Advisor finish (about 8 mins), this is the message about kernel

Code:
The system kernel is up-to-date at version “3.10.0-957.10.1.el7”.
I checked kernelcare info and this is the output

Code:
kcarectl --info
kpatch-state: patch is applied
kpatch-for: Linux version 3.10.0-327.4.4.el7.centos.plus.x86_64 ([email protected]) (gcc version 4.8.3 20140911 (Red Hat 4.8.3-9) (GCC) ) #1 SMP Wed Jan 6 00:35:56 UTC 2016
kpatch-build-time: Mon Apr  1 23:22:58 2019
kpatch-description: 247-:1557788646;3.10.0-957.10.1.el7
I'm a bit confused :confused: What's wrong with that???
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,911
2,234
363
Hello @rs200,

Can you open a support ticket so we can take a closer look at your system? You can post the ticket number here and we'll link this thread to it.

Thank you.
 

rs200

Active Member
Dec 4, 2017
33
7
8
Italy
cPanel Access Level
Root Administrator
Hello @rs200,

Can you open a support ticket so we can take a closer look at your system? You can post the ticket number here and we'll link this thread to it.

Thank you.
Hi Michael, sorry for late but i didn't receive the notification on my mailbox.

The ticket number is 12441665.
 
  • Like
Reactions: cPanelMichael

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,911
2,234
363
on my VPS with cPanel and KernelCare installed i noticed that Security Advisor takes too much time to finish, especially during Cpanel::Security::Advisor::Assessors::Kernel 1.06
Hello,

To update, the Security Advisor scan could not finish on the affected system due to a firewall rule blocking connections to the IP addresses associated with one of the system's YUM repos. Disabling the firewall rule that blocked these IP addresses allowed Security Advisor scan to finish successfully.

The system kernel is up-to-date at version “3.10.0-957.10.1.el7”.
This message is accurate, as your system kernel version you see in the uname output won't change until the server is rebooted. With KernelCare, your system is operating with a live patched kernel (use kcarectl --info to see the version) despite what appears in the uname output.

Thank you.
 
  • Like
Reactions: rs200