KernelCare fixes Meltdown and Spectre without reboots!

By now, you might have thought that the topic of Meltdown and Spectre vulnerabilities is taking a backstage in the news. Not so, as the impact and the solutions to resolve the issues seem to be the talk of the technical community still.

Many talented engineers across OS vendors, cloud computing companies, and many other technology companies have worked around the clock to develop fixes, to test them, and to apply. Those fixes are designed to eradicate the issue that could cause a massive security breach, and eliminate performance slowdowns. The fixes are meant to prevent programs from peaking inside the kernel’s memory and the impact of which, especially in the hosting community, can be severe.

There are instances of proof of concept code available publicly that can exploit Meltdown and Specter vulnerabilities. It is suspected that hackers are weaponizing them. Not addressing these vulnerabilities, now that after 20 years they have been made public, is not really an option.

Many cloud providers and enterprises are looking to release fixes but the need for a reboot complicates the process as it brings down servers of all of their customers and business units. Not to mention the amount of internal resources and organizations needed for such operation is massive. Because of that, many companies have not yet updated their servers. All our customers have been challenged with this issue, and many have contacted us asking for a solution.

More than half-dozen of our kernel developers have been working diligently to come up with the KernelCare solution – patches that would fix the Meltdown and Spectre issues without customers needing to reboot servers. It proved to be a challenging task, but after working continuously on developing a solution, they finally did!

Our live patching technology, KernelCare, delivers uninterrupted security updates of the kernel — without any interference or downtime for software running on the server. It fixes only the affected part, without actually rebooting or restarting the server. With these pinpointed updates, we can minimize the change and do it live. Launched over 3 years ago, now with over 100,000 servers running KernelCare, we are the only live patching vendor for the below-mentioned distributions delivering patches for Meltdown and Spectre (spectre-v1) vulnerabilities.

Meltdown and Spectre fixes require reboots. Not with KernelCare. If you don’t have KernelCare, you can get the FREE TRIAL, and update all kernels, on an unlimited number of servers, without reboots now. 

See: KernelCare Patches Against Spectre Vulnerability Are On The Way

SRBDS/CrossTalk (CVE-2020-0543) Vulnerability Being Patched By KernelCare

Zombieload – Critical Linux CVE Affects Almost All Intel CPUs