kpatch

<p>kpatch is a feature of the <a href="/facts/Linux_kernel/dlkduHuA">Linux kernel</a> that implements <a href="/facts/Live_patching/sIHVBPls">live patching</a> of a running <a href="/facts/Kernel_(operating_system)/uEj4U3Rz">kernel</a>, which allows kernel <a href="/facts/Patch_(computing)/sIHVBPls">patches</a> to be applied while the kernel is still running.  By avoiding the need for rebooting the system with a new kernel that contains the desired patches, kpatch aims to maximize the system <a href="/facts/Uptime/7PXQlwEE">uptime</a> and <a href="/facts/Availability_(system)/VENVjwAb">availability</a>.  At the same time, kpatch allows kernel-related security updates to be applied without deferring them to <a href="/facts/Scheduled_downtime/8DcAUp3j">scheduled downtimes</a>.  Internally, kpatch allows entire <a href="/facts/Function_(programming)/9vFJrg0A">functions</a> in a running kernel to be replaced with their patched versions, doing that safely by stopping all running processes while the live patching is performed.
</p><p>kpatch is developed by <a href="/facts/Red_Hat/5rhmBLBa">Red Hat</a>, with its <a href="/facts/Source_code/o9J6Jv23">source code</a> licensed under the terms of the <a href="/facts/GNU_General_Public_License_version_2/S75KhLSX">GNU General Public License version 2</a> (GPLv2).  In May 2014, kpatch was submitted for inclusion into the <a href="/facts/Linux_kernel_mainline/dlkduHuA">Linux kernel mainline</a>, and the minimalistic foundations for live patching were merged into the Linux kernel mainline in kernel version 4.0, which was released on April 12, 2015.
</p>

kpatch open-in-new

kpatch