Unknown Kernel (CentOS Linux 3.10.0-862.11.6.el7.x86_64)

Paul Shultz

Active Member
Jun 5, 2018
30
12
8
Malebourne
cPanel Access Level
Root Administrator
Just enabled Kernel Care as it was offered free with the recent updates.

Now getting a flood emails every 3-4 hours on all servers with:

Unknown Kernel (CentOS Linux 3.10.0-862.11.6.el7.x86_64)

Is this normal?
 

rpvw

Well-Known Member
Jul 18, 2013
1,100
472
113
UK
cPanel Access Level
Root Administrator
Is this normal?
YES

If you have installed KernelCare, you will get an email every 4 hours (the KernelCare check cycle) until such time as Cloudlinux release a patch relevant to that particular kernel.

This indicates is that your current kernel is fully up-to-date, and requires no patches. You will see from this page KernelCare Directory that the last patches were released for the kernel-3.10.0-862.9.1.el7 on the 10th August 2018. Details about all patch sets from KernelCare Patches


Please note:-

I don't think the full KernelCare service is free - after the 30 day free trial period prices are $3.95/month for a single server according to their web site.

Do not confuse the full KernelCare service with the free Symlink protection patch The Symlink Protection patchset is available for free for CentOS 6 & 7, even if you are not running KernelCare

See Kernel-based symlink protection for all, thanks to CloudLinux | cPanel Blog and Symlink Race Condition Protection - EasyApache 4 - cPanel Documentation for more details.
 
  • Like
Reactions: cPanelLauren

Paul Shultz

Active Member
Jun 5, 2018
30
12
8
Malebourne
cPanel Access Level
Root Administrator
Hi,

Yes I understood that the feature for the free Symlink protection as released by kernel care as a free tier service. Its sounds like a good initiative as per The Symlink Protection patchset is available for free for CentOS 6 & 7, even if you are not running KernelCare.

The only issue is I didn't expect to be receiving hundreds of emails per day from all the servers.

If you look at kernel-3.10.0-862.9.1.el7 (rhel7) it was released on Jul 16 and KernelCare released its patch some 25 days later. I guess this is the normal turnaround time?, which is my main question. This is also for licensed KernelCare customers, so I expect the free tier, to have even less priority.

This would kind of suggest that I will continually receive a flood of emails until a patch is released.

Why someone thought that is good idea, is beyond me?
 

cPanelLauren

Product Owner II
Staff member
Nov 14, 2017
13,266
1,300
363
Houston
Hi @Paul Shultz

If you look at kernel-3.10.0-862.9.1.el7 (rhel7) it was released on Jul 16 and KernelCare released its patch some 25 days later. I guess this is the normal turnaround time?, which is my main question. This is also for licensed KernelCare customers, so I expect the free tier, to have even less priority.
There is some turnaround time between when the newest kernel is released to when kernelcare will cover it for both the symlink protection and kernelcare paid services. The general rule of thumb is that when KernelCare supports the kernel so will the free patch though.

You can modify the cron to run at different intervals but ultimately this could get overwritten and might affect the speed at which you receive updates.