Secuity Advisor Kernel Warning

EneTar

• January 03, 2018 15:31

During the last week I get this on the Security Advisor of two different CentOS 6.9 with WHM v68.0.21 The system kernel is at version "", but is set to boot to version "2.6.32-696.16.1.el6.x86_64". You must take one of the following actions to ensure the system is up-to-date: Wait a few days for KernelCare to publish a kernel patch. Reboot the system.
Rebooting doesn't do anything. Both servers report this #uname -r 2.6.32-696.16.1.el6.x86_64 #kcare-uname -r 2.6.32-696.16.1.el6.x86_64
Is this a bug?

• 

  24x7server

  • January 04, 2018 15:36

  Hi, Can you share a screenshot of the security advisory here? We will need to see that page fully.

  0
• 

  Infopro

  • January 04, 2018 15:47

  No need.

  The system kernel is at version "",

  
  That shows the issue.

  0
• 

  EneTar

  • January 04, 2018 17:24

  Here is the screenshot. Everything else is green cdn.pbrd.co/images/H1oRa5i.jpg

  That shows the issue.

  
  So how to fix the issue?

  0
• 

  cPanelMichael

  • January 05, 2018 16:08

  Hello, Could you run the following commands and let us know the output? kcarectl --version kcarectl --check /usr/local/cpanel/3rdparty/bin/perl -e 'use Cpanel::Kernel::Status; use Data::Dumper; my $kernel = Cpanel::Kernel::Status::kernel_status(); print Dumper \$kernel;'
  Thank you.

  0
• 

  EneTar

  • January 05, 2018 16:14

  Yes here is the output # kcarectl --version 2.14-2 # kcarectl --check The latest patch is applied. # /usr/local/cpanel/3rdparty/bin/perl -e 'use Cpanel::Kernel::Status; use Data::Dumper; my $kernel = Cpanel::Kernel::Status::kernel_status(); print Dumper \$kernel;' $VAR1 = \{ 'has_kernelcare' => 1, 'running_latest' => '', 'boot_version' => '2.6.32-696.16.1.el6.x86_64', 'running_version' => '', 'reboot_required' => 1, 'unpatched_version' => '2.6.32-696.16.1.el6.x86_64' };
  

  0
• 

  cPanelMichael

  • January 10, 2018 19:08

  'running_version' => '',

  
  Hello, It looks like the running kernel isn't detected. Feel free to open a support ticket using the link in my signature so we can take a closer look to see what's happening. Thank you.

  0
• 

  EneTar

  • January 16, 2018 09:56

  I will. However this message appeared after a cPanel update in late November or early December. Both servers are in the Release channel.

  0
• 

  jndawson

  • January 23, 2018 17:33

  Same issue here. We installed the KernelCare free patch: [ root@cp1 ~># kcarectl --version 2.14-2 [ root@cp1 ~># kcarectl --check The latest patch is applied. [ root@cp1 ~># /usr/local/cpanel/3rdparty/bin/perl -e 'use Cpanel::Kernel::Status; use Data::Dumper; my $kernel = Cpanel::Kernel::Status::kernel_status(); print Dumper \$kernel;' $VAR1 = \{ 'reboot_required' => 1, 'unpatched_version' => '2.6.32-696.18.7.el6.x86_64', 'running_version' => '', 'has_kernelcare' => 1, 'boot_version' => '2.6.32-696.18.7.el6.x86_64', 'running_latest' => '' };
  

  0
• 

  cPanelMichael

  • January 23, 2018 17:41

  Hi @jndawson, Could you open a support ticket so we can take a closer look? Thank you.

  0
• 

  PeteS

  • March 16, 2018 08:38

  Can we get some feedback on this? It seems to be pretty common issue with KernelCare of late. Am I correct that this KernelCare info in security advisor replaces the normal notice that shows up in WHM when a new kernel version is available? My experience is that KC is correct that a new kernel is available but just can't detect the current version. If so then it's not a huge problem, you just check your current vs what's available and update it if you choose. But the bug is still annoying, so is there a fix, or will that come in an update to KC?

  0
• 

  EneTar

  • March 16, 2018 08:40

  I think this is fixed in 70 but they forgot to update this thread. It's a bug in 68.

  0
• 

  PeteS

  • March 16, 2018 08:48

  Thanks for that. I'm still on 68.

  0
• 

  cPanelMichael

  • March 16, 2018 17:11

  Thanks for that. I'm still on 68.

  
  Hello, cPanel verison 70 includes the following case: Implemented case CPANEL-17016: Add support for detecting and installing KernelCare's free patch set. This should address the issue you have described. Thank you.

  0

Please sign in to leave a comment.