kernel care free patch set

WorkinOnIt

• August 23, 2024 23:42

Circling back to this issue which is not resolved for me.

I am running Rocky 8.10.0 kvm and cPanel v 120.0.16 and kernel 4.18.0-553.16.1.el8_10.x86_64

 

In WHM I see:

1) Add KernelCare’s Free Symlink Protection.

But when I try to do so, it loads the new page, then reloads security advisor and just shows the same message - and does not add the free patch set.

 

2) A KernelCare update is available.

You must take one of the following actions to ensure the system is up-to-date:

• Patch the kernel (run “kcarectl --update” on the command line).
• Update the system (run “yum -y update” on the command line), and reboot the system.

But this results in 

[root@ ~]# kcarectl --update
Downloading updates
HTTP Error 401: Unauthorized: https://patches.kernelcare.com/patches/K20845645......98fe39ff0f3/1/kpatch.bin

 

Now when I check this on the kernel care website https://patches.kernelcare.com/ it says there a 0 cves.

So I assume by this, I don't need to add kernel care or the patch set as these are not available for my machine?

If that is the case, why does it continue to show the messages in WHM ?

• 

  WorkinOnIt

  • August 23, 2024 23:46
  • Edited

  I should add that I also raised this a few months back:

  https://support.cpanel.net/hc/en-us/community/posts/20900516913815-Add-KernelCare-s-Free-Symlink-Protection

  with the answer here:

  https://support.cpanel.net/hc/en-us/articles/23094436295959-Security-Advisor-suggests-unavailable-free-patch-for-KernelCare-on-AlmaLinux-9

  However, as mentioned above, I am using Rocky 8 too, so I assume this issue pertains to both?

  0
• 

  cPRex Jurassic Moderator

  • August 26, 2024 18:48

  I'm not aware of any issues with Rocky 8 at this time, as the Security Advisor issue is specifically for version 9.  I have the CloudLinux team and our team looking into this and I'll let you know as soon as I have more details.

  0
• 

  cPRex Jurassic Moderator

  • August 27, 2024 17:34

  I spoke with the CloudLinux team they confirmed the install on AlmaLinux 9 works well at this time.  Here is some output from a test server showing this:

  root@hostname ~]# kcarectl --set-patch-type free
  'free' patch type selected
  [root@hostname ~]# uname -a
  Linux hostname.techfiles.org 5.14.0-427.20.1.el9_4.x86_64 #1 SMP PREEMPT_DYNAMIC Mon Jun 10 08:04:28 EDT 2024 x86_64 x86_64 x86_64 GNU/Linux
  [root@hostname ~]# kcarectl --update
  Downloading updates
  Patch level 4 applied. Effective kernel version 5.14.0-427.28.1.el9_4
  Kernel is safe
  [root@hostname ~]# cat /etc/almalinux-release
  AlmaLinux release 9.4 (Seafoam Ocelot)

  I still wouldn't expect there to be any issue with RockyLinux 8 as that has been supported for some time.  We might need to see a ticket on this one in order to troubleshoot the issue, as I can't make that same error happen with my testing.

  0
• 

  WorkinOnIt

  • August 18, 2025 00:13

  Still having issues with this

   

  [root@ ~]# kcarectl --update
  Downloading updates
  HTTP Error 401: Unauthorized: https://patches.kernelcare.com/patches/K20250810_07/2f855701cc4401a83422eed7179f53285a7a8440/4/kpatch.bin
  
  

   

  0
• 

  cPAdminsMichael

  • August 18, 2025 12:30

  Hi!

  What does "kcarectl -i" return? I suspect that you are not on their free patch type.

   

  - Michael

  cPAdmins
  Your European cPanel Expert Company, www.cpadmins.com

  0

Please sign in to leave a comment.