Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

SOLVED Kernel version and system release don't match

Discussion in 'Security' started by rs200, May 15, 2019.

  1. rs200

    rs200 Member

    Joined:
    Dec 4, 2017
    Messages:
    23
    Likes Received:
    5
    Trophy Points:
    3
    Location:
    Italy
    cPanel Access Level:
    Root Administrator
    Hi,

    on my VPS with cPanel and KernelCare installed i noticed that Security Advisor takes too much time to finish, especially during Cpanel::Security::Advisor::Assessors::Kernel 1.06

    I checked the kernel version and this is the output

    Code:
    uname -s -r
    Linux 3.10.0-327.4.4.el7.centos.plus.x86_64
    The system release is

    Code:
    cat /etc/system-release
    CentOS Linux release 7.6.1810 (Core)
    Now why there is a difference between the kernel ver and release. CentOS 7.6 kernel version is 3.10.0-957 not 3.10.0-327 o_O

    Update: when Security Advisor finish (about 8 mins), this is the message about kernel

    Code:
    The system kernel is up-to-date at version “3.10.0-957.10.1.el7”.
    I checked kernelcare info and this is the output

    Code:
    kcarectl --info
    kpatch-state: patch is applied
    kpatch-for: Linux version 3.10.0-327.4.4.el7.centos.plus.x86_64 (builder@kbuilder.dev.centos.org) (gcc version 4.8.3 20140911 (Red Hat 4.8.3-9) (GCC) ) #1 SMP Wed Jan 6 00:35:56 UTC 2016
    kpatch-build-time: Mon Apr  1 23:22:58 2019
    kpatch-description: 247-:1557788646;3.10.0-957.10.1.el7
    I'm a bit confused :confused: What's wrong with that???
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  2. cPanelMichael

    cPanelMichael Technical Support Community Manager Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    47,335
    Likes Received:
    2,163
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello @rs200,

    Can you open a support ticket so we can take a closer look at your system? You can post the ticket number here and we'll link this thread to it.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. rs200

    rs200 Member

    Joined:
    Dec 4, 2017
    Messages:
    23
    Likes Received:
    5
    Trophy Points:
    3
    Location:
    Italy
    cPanel Access Level:
    Root Administrator
    Hi Michael, sorry for late but i didn't receive the notification on my mailbox.

    The ticket number is 12441665.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    cPanelMichael likes this.
  4. cPanelMichael

    cPanelMichael Technical Support Community Manager Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    47,335
    Likes Received:
    2,163
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    To update, the Security Advisor scan could not finish on the affected system due to a firewall rule blocking connections to the IP addresses associated with one of the system's YUM repos. Disabling the firewall rule that blocked these IP addresses allowed Security Advisor scan to finish successfully.

    This message is accurate, as your system kernel version you see in the uname output won't change until the server is rebooted. With KernelCare, your system is operating with a live patched kernel (use kcarectl --info to see the version) despite what appears in the uname output.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    rs200 likes this.
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice