SOLVED Kernel version and system release don't match

[rs200]

Hi,

on my VPS with cPanel and KernelCare installed i noticed that Security Advisor takes too much time to finish, especially during Cpanel::Security::Advisor::Assessors::Kernel 1.06

I checked the kernel version and this is the output

uname -s -r
Linux 3.10.0-327.4.4.el7.centos.plus.x86_64

The system release is

cat /etc/system-release
CentOS Linux release 7.6.1810 (Core)

Now why there is a difference between the kernel ver and release. CentOS 7.6 kernel version is 3.10.0-957 not 3.10.0-327

Update: when Security Advisor finish (about 8 mins), this is the message about kernel

The system kernel is up-to-date at version “3.10.0-957.10.1.el7”.

I checked kernelcare info and this is the output

kcarectl --info
kpatch-state: patch is applied
kpatch-for: Linux version 3.10.0-327.4.4.el7.centos.plus.x86_64 ([email protected]) (gcc version 4.8.3 20140911 (Red Hat 4.8.3-9) (GCC) ) #1 SMP Wed Jan 6 00:35:56 UTC 2016
kpatch-build-time: Mon Apr  1 23:22:58 2019
kpatch-description: 247-:1557788646;3.10.0-957.10.1.el7

I'm a bit confused What's wrong with that???

 

[cPanelMichael]

Hello @rs200,

Can you open a support ticket so we can take a closer look at your system? You can post the ticket number here and we'll link this thread to it.

Thank you.

 

[rs200]

Hello @rs200,

Can you open a support ticket so we can take a closer look at your system? You can post the ticket number here and we'll link this thread to it.

Thank you.

Hi Michael, sorry for late but i didn't receive the notification on my mailbox.

The ticket number is 12441665.

 

[cPanelMichael]

on my VPS with cPanel and KernelCare installed i noticed that Security Advisor takes too much time to finish, especially during Cpanel::Security::Advisor::Assessors::Kernel 1.06

Hello,

To update, the Security Advisor scan could not finish on the affected system due to a firewall rule blocking connections to the IP addresses associated with one of the system's YUM repos. Disabling the firewall rule that blocked these IP addresses allowed Security Advisor scan to finish successfully.

The system kernel is up-to-date at version “3.10.0-957.10.1.el7”.

This message is accurate, as your system kernel version you see in the uname output won't change until the server is rebooted. With KernelCare, your system is operating with a live patched kernel (use kcarectl --info to see the version) despite what appears in the uname output.

Thank you.