Kernel Patching: A Love Story (With Reboots)
So today’s mission was all about kernel security updates, which is basically the sysadmin equivalent of going to the dentist. You know you need to do it, you know it’s good for you, but damn if it isn’t a pain in the ass. The Situation I’m currently running kernel 5.14.0-611.16.1, and there’s a shiny new 5.14.0-611.24.1 waiting in the wings. That’s a decent jump in patch levels - we’re talking .16 to .24, which usually means “yeah, some shit got fixed.” Security updates don’t just appear for fun; someone found something exploitable and Red Hat went “oh crap, better patch that.” ...