Linux Kernel Livepatch 深度实战：无需重启修复生产内核漏洞的工程实践

%3Carticle%20class%3D%22content%22%3E%0A%3Ch1%20id%3D%22linux-kernel-livepatch%22%3ELinux%20Kernel%20Livepatch%20%E6%B7%B1%E5%BA%A6%E5%AE%9E%E6%88%98%EF%BC%9A%E6%97%A0%E9%9C%80%E9%87%8D%E5%90%AF%E4%BF%AE%E5%A4%8D%E7%94%9F%E4%BA%A7%E5%86%85%E6%A0%B8%E6%BC%8F%E6%B4%9E%E7%9A%84%E5%B7%A5%E7%A8%8B%E5%AE%9E%E8%B7%B5%3C%2Fh1%3E%0A%3Cblockquote%3E%0A%3Cp%3E%E5%9C%A8%E5%85%B3%E9%94%AE%E4%B8%9A%E5%8A%A1%E5%9C%BA%E6%99%AF%E4%B8%AD%EF%BC%8C%E5%86%85%E6%A0%B8%E5%AE%89%E5%85%A8%E6%BC%8F%E6%B4%9E%EF%BC%88%E5%A6%82%20CVE-2024-1086%20%E7%AD%89%EF%BC%89%E7%9A%84%E4%BF%AE%E5%A4%8D%E5%BE%80%E5%BE%80%E8%BF%AB%E5%9C%A8%E7%9C%89%E7%9D%AB%EF%BC%8C%E4%BD%86%E9%87%8D%E5%90%AF%E7%94%9F%E4%BA%A7%E6%9C%8D%E5%8A%A1%E5%99%A8%E6%84%8F%E5%91%B3%E7%9D%80%E6%9C%8D%E5%8A%A1%E4%B8%AD%E6%96%AD%E3%80%81%E4%BC%9A%E8%AF%9D%E4%B8%A2%E5%A4%B1%E5%92%8C%20SLA%20%E8%BF%9D%E7%BA%A6%E3%80%82Linux%20Kernel%20Livepatch%20%E6%8A%80%E6%9C%AF%E8%AE%A9%E7%B3%BB%E7%BB%9F%E7%AE%A1%E7%90%86%E5%91%98%E8%83%BD%E5%A4%9F%E5%9C%A8%E8%BF%90%E8%A1%8C%E6%97%B6%E5%8A%A8%E6%80%81%E6%9B%BF%E6%8D%A2%E6%9C%89%E7%BC%BA%E9%99%B7%E7%9A%84%E5%86%85%E6%A0%B8%E5%87%BD%E6%95%B0%EF%BC%8C%E5%AE%9E%E7%8E%B0%22%E7%83%AD%E4%BF%AE%E5%A4%8D%22%E3%80%82%E6%9C%AC%E6%96%87%E5%B0%86%E6%B7%B1%E5%85%A5%E6%8E%A2%E8%AE%A8%20Livepatch%20%E7%9A%84%E6%8A%80%E6%9C%AF%E5%8E%9F%E7%90%86%E3%80%81%E5%86%85%E6%A0%B8%E5%AE%9E%E7%8E%B0%E6%9C%BA%E5%88%B6%E3%80%81kpatch%20%E4%B8%8E%20kgraf%20%E4%B8%A4%E5%A4%A7%E6%A1%86%E6%9E%B6%E7%9A%84%E5%B7%A5%E7%A8%8B%E5%AE%9E%E8%B7%B5%EF%BC%8C%E4%BB%A5%E5%8F%8A%E7%94%9F%E4%BA%A7%E7%8E%AF%E5%A2%83%E9%83%A8%E7%BD%B2%E4%B8%AD%E7%9A%84%E5%85%B3%E9%94%AE%E6%B3%A8%E6%84%8F%E4%BA%8B%E9%A1%B9%E3%80%82%3C%2Fp%3E%0A%3C%2Fblockquote%3E%0A%3Ch2%20id%3D%22livepatch%22%3E%E4%B8%80%E3%80%81Livepatch%20%E6%8A%80%E6%9C%AF%E6%A6%82%E8%A7%88%3C%2Fh2%3E%0A%3Ch3%20id%3D%2211%22%3E1.1%20%E4%BB%80%E4%B9%88%E6%98%AF%E5%86%85%E6%A0%B8%E7%83%AD%E8%A1%A5%E4%B8%81%3C%2Fh3%3E%0A%3Cp%3E%E5%86%85%E6%A0%B8%E7%83%AD%E8%A1%A5%E4%B8%81%EF%BC%88Livepatch%EF%BC%89%E5%85%81%E8%AE%B8%E5%9C%A8%E7%B3%BB%E7%BB%9F%E8%BF%90%E8%A1%8C%E6%97%B6%E6%9B%BF%E6%8D%A2%E5%86%85%E6%A0%B8%E4%B8%AD%E7%9A%84%E5%87%BD%E6%95%B0%EF%BC%8C%E6%97%A0%E9%9C%80%E9%87%8D%E5%90%AF%E7%B3%BB%E7%BB%9F%E6%88%96%E4%B8%AD%E6%96%AD%E7%94%A8%E6%88%B7%E7%A9%BA%E9%97%B4%E8%BF%9B%E7%A8%8B%E3%80%82%E5%85%B6%E6%A0%B8%E5%BF%83%E4%BB%B7%E5%80%BC%E5%9C%A8%E4%BA%8E%EF%BC%9A%3C%2Fp%3E%0A%3Cul%3E%0A%3Cli%3E%3Cstrong%3E%E9%9B%B6%E5%81%9C%E6%9C%BA%E4%BF%AE%E5%A4%8D%E5%AE%89%E5%85%A8%E6%BC%8F%E6%B4%9E%3C%2Fstrong%3E%EF%BC%9A%E5%9C%A8%20CVE%20%E6%8A%AB%E9%9C%B2%E5%90%8E%E7%AB%8B%E5%8D%B3%E5%BA%94%E7%94%A8%E8%A1%A5%E4%B8%81%EF%BC%8C%E6%97%A0%E9%9C%80%E7%AD%89%E5%BE%85%E7%BB%B4%E6%8A%A4%E7%AA%97%E5%8F%A3%3C%2Fli%3E%0A%3Cli%3E%3Cstrong%3E%E6%BB%A1%E8%B6%B3%E5%90%88%E8%A7%84%E8%A6%81%E6%B1%82%3C%2Fstrong%3E%EF%BC%9A%E9%87%91%E8%9E%8D%E3%80%81%E5%8C%BB%E7%96%97%E7%AD%89%E8%A1%8C%E4%B8%9A%E6%9C%89%E4%B8%A5%E6%A0%BC%E7%9A%84%20SLA%20%E8%A6%81%E6%B1%82%EF%BC%8C%E4%B8%8D%E5%85%81%E8%AE%B8%E9%A2%91%E7%B9%81%E9%87%8D%E5%90%AF%3C%2Fli%3E%0A%3Cli%3E%3Cstrong%3E%E9%99%8D%E4%BD%8E%E8%BF%90%E7%BB%B4%E9%A3%8E%E9%99%A9%3C%2Fstrong%3E%EF%BC%9A%E9%81%BF%E5%85%8D%E9%87%8D%E5%90%AF%E5%AF%BC%E8%87%B4%E7%9A%84%E7%A1%AC%E4%BB%B6%E5%88%9D%E5%A7%8B%E5%8C%96%E5%A4%B1%E8%B4%A5%E3%80%81%E6%9C%8D%E5%8A%A1%E5%90%AF%E5%8A%A8%E4%BE%9D%E8%B5%96%E9%97%AE%E9%A2%98%3C%2Fli%3E%0A%3C%2Ful%3E%0A%3Ch3%20id%3D%2212%22%3E1.2%20%E6%8A%80%E6%9C%AF%E9%99%90%E5%88%B6%3C%2Fh3%3E%0A%3Cp%3ELivepatch%20%E5%B9%B6%E9%9D%9E%E4%B8%87%E8%83%BD%EF%BC%8C%E5%AE%83%E6%9C%89%E4%BB%A5%E4%B8%8B%E6%A0%B8%E5%BF%83%E7%BA%A6%E6%9D%9F%EF%BC%9A%3C%2Fp%3E%0A%3Cul%3E%0A%3Cli%3E%3Cstrong%3E%E4%B8%8D%E8%83%BD%E4%BF%AE%E6%94%B9%E6%95%B0%E6%8D%AE%E7%BB%93%E6%9E%84%E5%B8%83%E5%B1%80%3C%2Fstrong%3E%EF%BC%88%E7%BB%93%E6%9E%84%E4%BD%93%E5%AD%97%E6%AE%B5%E5%A2%9E%E5%88%A0%E4%BC%9A%E7%A0%B4%E5%9D%8F%E5%B7%B2%E6%9C%89%E5%86%85%E5%AD%98%E4%B8%AD%E7%9A%84%E6%95%B0%E6%8D%AE%E8%AF%AD%E4%B9%89%EF%BC%89%3C%2Fli%3E%0A%3Cli%3E%3Cstrong%3E%E4%B8%8D%E8%83%BD%E7%A7%BB%E9%99%A4%E5%AF%BC%E5%87%BA%E7%9A%84%E7%AC%A6%E5%8F%B7%E6%88%96%E6%94%B9%E5%8F%98%E5%87%BD%E6%95%B0%E5%8E%9F%E5%9E%8B%3C%2Fstrong%3E%3C%2Fli%3E%0A%3Cli%3E%3Cstrong%3E%E5%87%BD%E6%95%B0%E6%9B%BF%E6%8D%A2%E4%BE%9D%E8%B5%96%20ftrace%20%E6%A1%86%E6%9E%B6%3C%2Fstrong%3E%EF%BC%8C%E5%AD%98%E5%9C%A8%E7%BA%A6%E5%BE%AE%E7%A7%92%E7%BA%A7%E7%9A%84%E8%B0%83%E7%94%A8%E9%97%B4%E6%8E%A5%E5%BC%80%E9%94%80%3C%2Fli%3E%0A%3Cli%3E%3Cstrong%3E%E7%8A%B6%E6%80%81%E4%B8%80%E8%87%B4%E6%80%A7%E6%8C%91%E6%88%98%3C%2Fstrong%3E%EF%BC%9A%E6%97%A7%E5%87%BD%E6%95%B0%E5%8F%AF%E8%83%BD%E6%AD%A3%E5%9C%A8%E6%89%A7%E8%A1%8C%EF%BC%8C%E6%96%B0%E5%87%BD%E6%95%B0%E5%BC%95%E5%85%A5%E7%9A%84%E8%AF%AD%E4%B9%89%E5%8F%98%E5%8C%96%E5%8F%AF%E8%83%BD%E5%AF%BC%E8%87%B4%E8%BF%90%E8%A1%8C%E6%97%B6%E7%8A%B6%E6%80%81%E4%B8%8D%E4%B8%80%E8%87%B4%3C%2Fli%3E%0A%3C%2Ful%3E%0A%3Ch2%20id%3D%22_1%22%3E%E4%BA%8C%E3%80%81%E5%86%85%E6%A0%B8%E5%AE%9E%E7%8E%B0%E5%8E%9F%E7%90%86%3C%2Fh2%3E%0A%3Ch3%20id%3D%2221-ftrace%22%3E2.1%20ftrace%20%E7%9A%84%22%E8%B7%B3%E6%9D%BF%22%E6%9C%BA%E5%88%B6%3C%2Fh3%3E%0A%3Cp%3ELivepatch%20%E7%9A%84%E6%A0%B8%E5%BF%83%E4%BE%9D%E8%B5%96%E6%98%AF%20ftrace%EF%BC%88Function%20Tracer%EF%BC%89%E3%80%82ftrace%20%E5%9C%A8%E7%BC%96%E8%AF%91%E6%97%B6%E4%B8%BA%E6%AF%8F%E4%B8%AA%E5%86%85%E6%A0%B8%E5%87%BD%E6%95%B0%E5%85%A5%E5%8F%A3%E5%A4%84%E6%8F%92%E5%85%A5%E4%B8%80%E6%9D%A1%20%3Ccode%3Enop%3C%2Fcode%3E%20%E6%8C%87%E4%BB%A4%EF%BC%88%E5%9C%A8%20x86_64%20%E4%B8%8A%E4%B8%BA%205%20%E5%AD%97%E8%8A%82%E7%9A%84%20%3Ccode%3Enop%3C%2Fcode%3E%EF%BC%89%EF%BC%8C%E5%BD%93%E9%9C%80%E8%A6%81%E8%B7%9F%E8%B8%AA%E5%87%BD%E6%95%B0%E6%97%B6%EF%BC%8C%E5%8A%A8%E6%80%81%E5%B0%86%20%3Ccode%3Enop%3C%2Fcode%3E%20%E6%9B%BF%E6%8D%A2%E4%B8%BA%E8%B7%B3%E8%BD%AC%E5%88%B0%20trampoline%20%E7%9A%84%E6%8C%87%E4%BB%A4%E3%80%82%3C%2Fp%3E%0A%3Cp%3ELivepatch%20%E5%88%A9%E7%94%A8%E8%BF%99%E4%B8%80%E6%9C%BA%E5%88%B6%EF%BC%9A%3C%2Fp%3E%0A%3Cpre%20class%3D%22codehilite%22%3E%3Ccode%3E%E5%8E%9F%E5%A7%8B%E5%87%BD%E6%95%B0%E5%85%A5%E5%8F%A3%EF%BC%9A%0A%20%200xffffffffc0001000%3A%20nop%20%285%20bytes%29%20%20%E2%86%90%20ftrace%20%E9%A2%84%E7%95%99%0A%20%200xffffffffc0001005%3A%20%26lt%3B%E6%AD%A3%E5%B8%B8%E5%87%BD%E6%95%B0%E4%BD%93%26gt%3B%0A%0ALivepatch%20%E6%BF%80%E6%B4%BB%E5%90%8E%EF%BC%9A%0A%20%200xffffffffc0001000%3A%20jmp%20%26lt%3Bnew_function%26gt%3B%20%20%E2%86%90%20%E6%9B%BF%E6%8D%A2%E4%B8%BA%E8%B7%B3%E8%BD%AC%E5%88%B0%E6%96%B0%E5%87%BD%E6%95%B0%0A%20%200xffffffffc0001005%3A%20%26lt%3B%E6%AD%A3%E5%B8%B8%E5%87%BD%E6%95%B0%E4%BD%93%EF%BC%88%E4%B8%8D%E5%86%8D%E8%A2%AB%E8%B0%83%E7%94%A8%EF%BC%89%26gt%3B%0A%3C%2Fcode%3E%3C%2Fpre%3E%0A%0A%3Ch3%20id%3D%2222-consistency-model%22%3E2.2%20consistency%20model%EF%BC%88%E4%B8%80%E8%87%B4%E6%80%A7%E6%A8%A1%E5%9E%8B%EF%BC%89%3C%2Fh3%3E%0A%3Cp%3E%E5%86%85%E6%A0%B8%E4%BD%BF%E7%94%A8%20%3Ccode%3Estack%20depth%3C%2Fcode%3E%20%E6%A3%80%E6%9F%A5%E6%9D%A5%E7%A1%AE%E4%BF%9D%E5%AE%89%E5%85%A8%E6%9B%BF%E6%8D%A2%EF%BC%9A%3C%2Fp%3E%0A%3Col%3E%0A%3Cli%3E%3Cstrong%3E%E8%B0%83%E7%94%A8%E6%A0%88%E6%A3%80%E6%9F%A5%3C%2Fstrong%3E%EF%BC%9ALivepatch%20%E9%80%9A%E8%BF%87%E6%A3%80%E6%9F%A5%E6%AF%8F%E4%B8%AA%20CPU%20%E4%B8%8A%E5%BD%93%E5%89%8D%E4%BB%BB%E5%8A%A1%E7%9A%84%E8%B0%83%E7%94%A8%E6%A0%88%EF%BC%8C%E7%A1%AE%E8%AE%A4%E6%B2%A1%E6%9C%89%E6%89%A7%E8%A1%8C%E6%B5%81%E4%BD%8D%E4%BA%8E%E6%97%A7%E5%87%BD%E6%95%B0%E4%B8%AD%3C%2Fli%3E%0A%3Cli%3E%3Cstrong%3E%E8%B6%85%E6%97%B6%E6%9C%BA%E5%88%B6%3C%2Fstrong%3E%EF%BC%9A%E8%AE%BE%E7%BD%AE%E6%9C%80%E5%A4%A7%E7%AD%89%E5%BE%85%E6%97%B6%E9%97%B4%EF%BC%88%E9%BB%98%E8%AE%A4%E6%97%A0%E9%99%90%E5%88%B6%EF%BC%8C%E5%8F%AF%E9%80%9A%E8%BF%87%20%3Ccode%3Esysctl%20livepatch.pending_timeout%3C%2Fcode%3E%20%E8%B0%83%E6%95%B4%EF%BC%89%3C%2Fli%3E%0A%3Cli%3E%3Cstrong%3E%E4%BB%BB%E5%8A%A1%E5%88%87%E6%8D%A2%E9%85%8D%E5%90%88%3C%2Fstrong%3E%EF%BC%9A%E5%9C%A8%20%3Ccode%3Eschedule%28%29%3C%2Fcode%3E%20%E7%82%B9%E6%A3%80%E6%9F%A5%EF%BC%8C%E5%88%A9%E7%94%A8%E4%B8%8A%E4%B8%8B%E6%96%87%E5%88%87%E6%8D%A2%E7%9A%84%E6%97%B6%E6%9C%BA%E5%88%A4%E6%96%AD%E6%97%A7%E5%87%BD%E6%95%B0%E6%98%AF%E5%90%A6%E5%B7%B2%E9%80%80%E5%87%BA%3C%2Fli%3E%0A%3Cli%3E%3Cstrong%3Eper-task%20%E6%A0%87%E5%BF%97%3C%2Fstrong%3E%EF%BC%9A%E4%B8%BA%E6%AF%8F%E4%B8%AA%20task%20%E8%AE%BE%E7%BD%AE%20%3Ccode%3ETIF_PATCH_PENDING%3C%2Fcode%3E%20%E6%A0%87%E5%BF%97%EF%BC%8C%E5%9C%A8%E8%BF%94%E5%9B%9E%E5%88%B0%E7%94%A8%E6%88%B7%E6%80%81%E6%97%B6%E7%BB%9F%E4%B8%80%E5%88%87%E6%8D%A2%3C%2Fli%3E%0A%3C%2Fol%3E%0A%3Ch3%20id%3D%2223%22%3E2.3%20%E7%A6%81%E7%94%A8%E4%B8%8E%E5%9B%9E%E6%BB%9A%3C%2Fh3%3E%0A%3Cp%3E%E6%AF%8F%E4%B8%AA%20Livepatch%20module%20%E9%83%BD%E6%94%AF%E6%8C%81%E5%8F%8D%E5%90%91%E6%93%8D%E4%BD%9C%EF%BC%9A%3C%2Fp%3E%0A%3Cpre%20class%3D%22codehilite%22%3E%3Ccode%20class%3D%22language-c%22%3E%2F%2F%20%E5%86%85%E6%A0%B8%E6%BA%90%E7%A0%81%20include%2Flinux%2Flivepatch.h%0Astruct%20klp_func%20%7B%0A%20%20%20%20unsigned%20long%20old_addr%3B%20%20%20%20%2F%2F%20%E5%8E%9F%E5%87%BD%E6%95%B0%E5%9C%B0%E5%9D%80%0A%20%20%20%20unsigned%20long%20new_addr%3B%20%20%20%20%2F%2F%20%E6%96%B0%E5%87%BD%E6%95%B0%E5%9C%B0%E5%9D%80%0A%20%20%20%20struct%20klp_ops%20%2Aops%3B%20%20%20%20%20%20%20%2F%2F%20%E6%93%8D%E4%BD%9C%E7%8A%B6%E6%80%81%E6%9C%BA%0A%7D%3B%0A%0A%2F%2F%20%E4%B8%80%E8%87%B4%E6%80%A7%E7%8A%B6%E6%80%81%E6%9C%BA%EF%BC%9A%0A%2F%2F%20DISABLED%20%E2%86%90%E2%86%92%20ENABLING%20%E2%86%92%20ENABLED%20%E2%86%90%E2%86%92%20DISABLING%20%E2%86%92%20DISABLED%0A%3C%2Fcode%3E%3C%2Fpre%3E%0A%0A%3Ch2%20id%3D%22kpatch%22%3E%E4%B8%89%E3%80%81kpatch%20%E5%AE%9E%E6%88%98%E6%8C%87%E5%8D%97%3C%2Fh2%3E%0A%3Cp%3Ekpatch%20%E6%98%AF%20Red%20Hat%20%E4%B8%BB%E5%AF%BC%E7%9A%84%20Livepatch%20%E5%AE%9E%E7%8E%B0%EF%BC%8C%E6%94%AF%E6%8C%81%20RHEL%2FCentOS%2FFedora%EF%BC%8C%E6%9E%B6%E6%9E%84%E6%9C%80%E4%B8%BA%E6%88%90%E7%86%9F%E3%80%82%3C%2Fp%3E%0A%3Ch3%20id%3D%2231%22%3E3.1%20%E7%8E%AF%E5%A2%83%E5%87%86%E5%A4%87%3C%2Fh3%3E%0A%3Cpre%20class%3D%22codehilite%22%3E%3Ccode%20class%3D%22language-bash%22%3E%23%20RHEL%2FCentOS%20%E5%AE%89%E8%A3%85%0Asudo%20yum%20install%20kpatch%20kpatch-runtime%0A%0A%23%20Fedora%20%E5%AE%89%E8%A3%85%0Asudo%20dnf%20install%20kpatch%20kpatch-dnf%0A%0A%23%20%E5%90%AF%E7%94%A8%E6%9C%8D%E5%8A%A1%0Asudo%20systemctl%20enable%20--now%20kpatch%0A%3C%2Fcode%3E%3C%2Fpre%3E%0A%0A%3Ch3%20id%3D%2232%22%3E3.2%20%E4%BB%8E%E6%BA%90%E7%A0%81%E7%BC%96%E8%AF%91%E8%A1%A5%E4%B8%81%E6%A8%A1%E5%9D%97%3C%2Fh3%3E%0A%3Cp%3Ekpatch%20%E7%9A%84%E5%B7%A5%E4%BD%9C%E5%8E%9F%E7%90%86%E6%98%AF%E7%BC%96%E8%AF%91%E6%96%B0%E6%97%A7%E4%B8%A4%E4%BB%BD%E5%86%85%E6%A0%B8%E6%BA%90%E7%A0%81%EF%BC%8C%E5%AF%B9%E6%AF%94%E5%B7%AE%E5%BC%82%E7%94%9F%E6%88%90%E8%A1%A5%E4%B8%81%E6%A8%A1%E5%9D%97%EF%BC%9A%3C%2Fp%3E%0A%3Cpre%20class%3D%22codehilite%22%3E%3Ccode%20class%3D%22language-bash%22%3E%23%201.%20%E5%87%86%E5%A4%87%E4%B8%A4%E4%BB%BD%E6%BA%90%E7%A0%81%EF%BC%88%E5%8E%9F%E5%A7%8B%20%2B%20%E4%BF%AE%E8%A1%A5%E5%90%8E%EF%BC%89%0Acp%20-r%20linux-6.1.0%20linux-6.1.0-fixed%0A%0A%23%202.%20%E5%9C%A8%20linux-6.1.0-fixed%20%E4%B8%AD%E5%BA%94%E7%94%A8%E5%AE%89%E5%85%A8%E8%A1%A5%E4%B8%81%0Acd%20linux-6.1.0-fixed%0Apatch%20-p1%20%2Fpath%2Fto%2Fsecurity-fix.patch%0A%0A%23%203.%20%E7%BC%96%E8%AF%91%20kpatch%20%E6%A8%A1%E5%9D%97%EF%BC%88%E9%9C%80%E8%A6%81%E5%86%85%E6%A0%B8%E8%B0%83%E8%AF%95%E4%BF%A1%E6%81%AF%EF%BC%89%0Akpatch-build%20%5C%0A%20%20%20%20--sourcedir%20%2Fusr%2Fsrc%2Fkernels%2F6.1.0%20%5C%0A%20%20%20%20--vmlinux%20%2Fusr%2Flib%2Fdebug%2Flib%2Fmodules%2F6.1.0%2Fvmlinux%20%5C%0A%20%20%20%20--patch%20%2Fpath%2Fto%2Fsecurity-fix.patch%20%5C%0A%20%20%20%20kernel%2Fmodule%2Fmm%2Fmmap.c%20%5C%0A%20%20%20%20kernel%2Fmodule%2Fnet%2Fsocket.c%0A%3C%2Fcode%3E%3C%2Fpre%3E%0A%0A%3Ch3%20id%3D%2233-red-hat%22%3E3.3%20%E7%9B%B4%E6%8E%A5%E5%BA%94%E7%94%A8%20Red%20Hat%20%E5%AE%98%E6%96%B9%E8%A1%A5%E4%B8%81%3C%2Fh3%3E%0A%3Cp%3ERed%20Hat%20%E6%8F%90%E4%BE%9B%E9%A2%84%E7%BC%96%E8%AF%91%E7%9A%84%20kpatch%20%E6%A8%A1%E5%9D%97%EF%BC%8C%E9%80%9A%E8%BF%87%E8%AE%A2%E9%98%85%E9%80%9A%E9%81%93%E8%8E%B7%E5%8F%96%EF%BC%9A%3C%2Fp%3E%0A%3Cpre%20class%3D%22codehilite%22%3E%3Ccode%20class%3D%22language-bash%22%3E%23%20%E6%9F%A5%E7%9C%8B%E5%8F%AF%E7%94%A8%E8%A1%A5%E4%B8%81%0Akpatch%20list%0A%0A%23%20%E5%AE%89%E8%A3%85%E7%89%B9%E5%AE%9A%20CVE%20%E8%A1%A5%E4%B8%81%0Asudo%20kpatch%20install%20kpatch-patch_6_1_1-1_0_2.el9.x86_64%0A%0A%23%20%E6%9F%A5%E7%9C%8B%E5%B7%B2%E5%8A%A0%E8%BD%BD%E8%A1%A5%E4%B8%81%0A%24%20kpatch%20list%0Akpatch-patch_6_1_1-1_0_2.el9.x86_64%20%5Benabled%5D%0A%0A%23%20%E7%A6%81%E7%94%A8%E8%A1%A5%E4%B8%81%EF%BC%88%E5%9B%9E%E6%BB%9A%EF%BC%89%0Asudo%20kpatch%20uninstall%20kpatch-patch_6_1_1-1_0_2.el9.x86_64%0A%3C%2Fcode%3E%3C%2Fpre%3E%0A%0A%3Ch3%20id%3D%2234%22%3E3.4%20%E8%87%AA%E5%AE%9A%E4%B9%89%E8%A1%A5%E4%B8%81%E7%A4%BA%E4%BE%8B%3C%2Fh3%3E%0A%3Cp%3E%E4%BB%A5%E4%B8%8B%E6%98%AF%E4%B8%80%E4%B8%AA%E4%BF%AE%E5%A4%8D%20%3Ccode%3Etcp_v4_connect%3C%2Fcode%3E%20%E4%B8%AD%20use-after-free%20%E6%BC%8F%E6%B4%9E%E7%9A%84%20Livepatch%20%E7%A4%BA%E4%BE%8B%EF%BC%9A%3C%2Fp%3E%0A%3Cp%3E%E5%8E%9F%E5%A7%8B%E5%86%85%E6%A0%B8%E4%BB%A3%E7%A0%81%EF%BC%88net%2Fipv4%2Ftcp_ipv4.c%EF%BC%89%EF%BC%9A%3C%2Fp%3E%0A%3Cpre%20class%3D%22codehilite%22%3E%3Ccode%20class%3D%22language-c%22%3Eint%20tcp_v4_connect%28struct%20sock%20%2Ask%2C%20struct%20sockaddr%20%2Auaddr%2C%20int%20addr_len%29%0A%7B%0A%20%20%20%20struct%20sockaddr_in%20%2Ausin%20%3D%20%28struct%20sockaddr_in%20%2A%29uaddr%3B%0A%20%20%20%20struct%20inet_sock%20%2Ainet%20%3D%20inet_sk%28sk%29%3B%0A%20%20%20%20struct%20tcp_sock%20%2Atp%20%3D%20tcp_sk%28sk%29%3B%0A%20%20%20%20__be16%20orig_sport%2C%20orig_daddr%3B%0A%20%20%20%20%2F%2F%20...%20%E7%9C%81%E7%95%A5%E9%83%A8%E5%88%86%E4%BB%A3%E7%A0%81%0A%0A%20%20%20%20orig_sport%20%3D%20inet-%26gt%3Binet_sport%3B%0A%20%20%20%20orig_daddr%20%3D%20inet-%26gt%3Binet_daddr%3B%0A%0A%20%20%20%20err%20%3D%20inet_hash_connect%28tp%2C%20uaddr%29%3B%20%20%2F%2F%20%E2%86%90%20Bug%3A%20%E6%9C%AA%E6%A3%80%E6%9F%A5%E8%BF%94%E5%9B%9E%E5%80%BC%0A%0A%20%20%20%20if%20%28err%29%0A%20%20%20%20%20%20%20%20goto%20failure%3B%0A%0A%20%20%20%20%2F%2F%20...%0A%7D%0A%3C%2Fcode%3E%3C%2Fpre%3E%0A%0A%3Cp%3E%E4%BF%AE%E5%A4%8D%E5%90%8E%E7%9A%84%E8%A1%A5%E4%B8%81%EF%BC%88patch-fix-tcp-connect.c%EF%BC%89%EF%BC%9A%3C%2Fp%3E%0A%3Cpre%20class%3D%22codehilite%22%3E%3Ccode%20class%3D%22language-c%22%3E%23include%20%26lt%3Blinux%2Flivepatch.h%26gt%3B%0A%0A%2F%2A%20%E6%96%B0%E5%87%BD%E6%95%B0%EF%BC%9A%E5%A2%9E%E5%8A%A0%E8%BF%94%E5%9B%9E%E5%80%BC%E6%A3%80%E6%9F%A5%20%2A%2F%0Astatic%20int%20fixed_tcp_v4_connect%28struct%20sock%20%2Ask%2C%20struct%20sockaddr%20%2Auaddr%2C%20int%20addr_len%29%0A%7B%0A%20%20%20%20struct%20sockaddr_in%20%2Ausin%20%3D%20%28struct%20sockaddr_in%20%2A%29uaddr%3B%0A%20%20%20%20struct%20inet_sock%20%2Ainet%20%3D%20inet_sk%28sk%29%3B%0A%20%20%20%20struct%20tcp_sock%20%2Atp%20%3D%20tcp_sk%28sk%29%3B%0A%20%20%20%20__be16%20orig_sport%2C%20orig_daddr%3B%0A%20%20%20%20int%20err%3B%0A%0A%20%20%20%20orig_sport%20%3D%20inet-%26gt%3Binet_sport%3B%0A%20%20%20%20orig_daddr%20%3D%20inet-%26gt%3Binet_daddr%3B%0A%0A%20%20%20%20err%20%3D%20inet_hash_connect%28tp%2C%20uaddr%29%3B%0A%20%20%20%20if%20%28err%29%0A%20%20%20%20%20%20%20%20goto%20failure%3B%0A%0A%20%20%20%20%2F%2F%20%E4%BF%AE%E5%A4%8D%EF%BC%9A%E5%A2%9E%E5%8A%A0%20NULL%20%E6%8C%87%E9%92%88%E6%A3%80%E6%9F%A5%0A%20%20%20%20if%20%28unlikely%28%21sk-%26gt%3Bsk_prot-%26gt%3Bconnect%29%29%20%7B%0A%20%20%20%20%20%20%20%20err%20%3D%20-EINVAL%3B%0A%20%20%20%20%20%20%20%20goto%20failure%3B%0A%20%20%20%20%7D%0A%0A%20%20%20%20return%20tcp_v4_connect_rest%28sk%2C%20uaddr%2C%20addr_len%2C%20orig_sport%2C%20orig_daddr%29%3B%0A%0Afailure%3A%0A%20%20%20%20TCP_INC_STATS%28sock_net%28sk%29%2C%20TCP_MIB_ATTEMPTFAILS%29%3B%0A%20%20%20%20return%20err%3B%0A%7D%0A%0Astatic%20struct%20klp_func%20funcs%5B%5D%20%3D%20%7B%0A%20%20%20%20%7B%0A%20%20%20%20%20%20%20%20.old_name%20%3D%20%26quot%3Btcp_v4_connect%26quot%3B%2C%0A%20%20%20%20%20%20%20%20.new_func%20%3D%20fixed_tcp_v4_connect%2C%0A%20%20%20%20%7D%2C%20%7B%20%7D%0A%7D%3B%0A%0Astatic%20struct%20klp_object%20objs%5B%5D%20%3D%20%7B%0A%20%20%20%20%7B%0A%20%20%20%20%20%20%20%20.name%20%3D%20NULL%2C%20%20%20%20%20%20%2F%2F%20%E8%A1%A8%E7%A4%BA%20vmlinux%0A%20%20%20%20%20%20%20%20.funcs%20%3D%20funcs%2C%0A%20%20%20%20%7D%2C%20%7B%20%7D%0A%7D%3B%0A%0Astatic%20struct%20klp_patch%20patch%20%3D%20%7B%0A%20%20%20%20.mod%20%3D%20THIS_MODULE%2C%0A%20%20%20%20.objs%20%3D%20objs%2C%0A%20%20%20%20.replace%20%3D%20true%2C%20%20%20%20%20%20%20%2F%2F%20%E5%AE%8C%E5%85%A8%E6%9B%BF%E6%8D%A2%E5%8E%9F%E5%87%BD%E6%95%B0%0A%7D%3B%0A%0Astatic%20int%20__init%20patch_init%28void%29%0A%7B%0A%20%20%20%20return%20klp_enable_patch%28%26amp%3Bpatch%29%3B%0A%7D%0A%0Amodule_init%28patch_init%29%3B%0AMODULE_LICENSE%28%26quot%3BGPL%26quot%3B%29%3B%0AMODULE_INFO%28livepatch%2C%20%26quot%3BY%26quot%3B%29%3B%0A%3C%2Fcode%3E%3C%2Fpre%3E%0A%0A%3Ch2%20id%3D%22livepatch_1%22%3E%E5%9B%9B%E3%80%81Livepatch%20%E5%9C%A8%E7%94%9F%E4%BA%A7%E7%8E%AF%E5%A2%83%E7%9A%84%E9%83%A8%E7%BD%B2%E7%AD%96%E7%95%A5%3C%2Fh2%3E%0A%3Ch3%20id%3D%2241-kexec%22%3E4.1%20%E4%B8%8E%E5%86%85%E6%A0%B8%E7%83%AD%E5%8D%87%E7%BA%A7%EF%BC%88Kexec%EF%BC%89%E7%9A%84%E9%80%89%E6%8B%A9%3C%2Fh3%3E%0A%3Ctable%3E%0A%3Cthead%3E%0A%3Ctr%3E%0A%3Cth%3E%E7%BB%B4%E5%BA%A6%3C%2Fth%3E%0A%3Cth%3ELivepatch%3C%2Fth%3E%0A%3Cth%3EKexec%20%E7%83%AD%E5%8D%87%E7%BA%A7%3C%2Fth%3E%0A%3C%2Ftr%3E%0A%3C%2Fthead%3E%0A%3Ctbody%3E%0A%3Ctr%3E%0A%3Ctd%3E%E4%BF%AE%E6%94%B9%E8%8C%83%E5%9B%B4%3C%2Ftd%3E%0A%3Ctd%3E%E5%87%BD%E6%95%B0%E7%BA%A7%3C%2Ftd%3E%0A%3Ctd%3E%E5%AE%8C%E6%95%B4%E5%86%85%E6%A0%B8%E6%9B%BF%E6%8D%A2%3C%2Ftd%3E%0A%3C%2Ftr%3E%0A%3Ctr%3E%0A%3Ctd%3E%E5%81%9C%E6%9C%BA%E6%97%B6%E9%97%B4%3C%2Ftd%3E%0A%3Ctd%3E0%EF%BC%88%E7%BA%B3%E7%A7%92%E7%BA%A7%E5%88%87%E6%8D%A2%EF%BC%89%3C%2Ftd%3E%0A%3Ctd%3E1-10%20%E7%A7%92%3C%2Ftd%3E%0A%3C%2Ftr%3E%0A%3Ctr%3E%0A%3Ctd%3E%E6%95%B0%E6%8D%AE%E7%BB%93%E6%9E%84%E4%BF%AE%E6%94%B9%3C%2Ftd%3E%0A%3Ctd%3E%E4%B8%8D%E6%94%AF%E6%8C%81%3C%2Ftd%3E%0A%3Ctd%3E%E6%94%AF%E6%8C%81%3C%2Ftd%3E%0A%3C%2Ftr%3E%0A%3Ctr%3E%0A%3Ctd%3E%E9%80%82%E7%94%A8%E5%AE%89%E5%85%A8%3C%2Ftd%3E%0A%3Ctd%3E%E4%BD%8E%EF%BC%88%E4%BF%A1%E4%BB%BB%20patch%20%E6%AD%A3%E7%A1%AE%E6%80%A7%EF%BC%89%3C%2Ftd%3E%0A%3Ctd%3E%E6%9B%B4%E9%AB%98%EF%BC%88%E5%AE%8C%E6%95%B4%E6%96%B0%E5%86%85%E6%A0%B8%EF%BC%89%3C%2Ftd%3E%0A%3C%2Ftr%3E%0A%3Ctr%3E%0A%3Ctd%3E%E5%A4%8D%E6%9D%82%E5%BA%A6%3C%2Ftd%3E%0A%3Ctd%3E%E4%B8%AD%E7%AD%89%3C%2Ftd%3E%0A%3Ctd%3E%E9%AB%98%3C%2Ftd%3E%0A%3C%2Ftr%3E%0A%3C%2Ftbody%3E%0A%3C%2Ftable%3E%0A%3Ch3%20id%3D%2242%22%3E4.2%20%E7%94%9F%E4%BA%A7%E9%83%A8%E7%BD%B2%E6%A3%80%E6%9F%A5%E6%B8%85%E5%8D%95%3C%2Fh3%3E%0A%3Cpre%20class%3D%22codehilite%22%3E%3Ccode%20class%3D%22language-bash%22%3E%23%21%2Fbin%2Fbash%0A%23%20pre-deployment-livepatch-check.sh%0A%0AKERNEL_VERSION%3D%24%28uname%20-r%29%0ADEBUG_INFO%3D%26quot%3B%2Fusr%2Flib%2Fdebug%2Flib%2Fmodules%2F%24%7BKERNEL_VERSION%7D%2Fvmlinux%26quot%3B%0A%0A%23%201.%20%E7%A1%AE%E8%AE%A4%E5%86%85%E6%A0%B8%E8%B0%83%E8%AF%95%E4%BF%A1%E6%81%AF%E5%AD%98%E5%9C%A8%0Aif%20%5B%20%21%20-f%20%26quot%3B%24DEBUG_INFO%26quot%3B%20%5D%3B%20then%0A%20%20%20%20echo%20%26quot%3BERROR%3A%20%E7%BC%BA%E5%B0%91%20vmlinux%20%E8%B0%83%E8%AF%95%E7%AC%A6%E5%8F%B7%E6%96%87%E4%BB%B6%26quot%3B%0A%20%20%20%20echo%20%26quot%3B%20%20%20%20sudo%20yum%20install%20kernel-debuginfo-%24%7BKERNEL_VERSION%7D%26quot%3B%0A%20%20%20%20exit%201%0Afi%0A%0A%23%202.%20%E7%A1%AE%E8%AE%A4%20Livepatch%20%E6%94%AF%E6%8C%81%E5%B7%B2%E5%90%AF%E7%94%A8%0Aif%20%5B%20%21%20-f%20%2Fsys%2Fkernel%2Flivepatch%20%5D%3B%20then%0A%20%20%20%20echo%20%26quot%3BERROR%3A%20%E5%86%85%E6%A0%B8%E6%9C%AA%E5%90%AF%E7%94%A8%20CONFIG_LIVEPATCH%26quot%3B%0A%20%20%20%20exit%201%0Afi%0A%0A%23%203.%20%E6%A3%80%E6%9F%A5%E5%BD%93%E5%89%8D%E5%B7%B2%E5%8A%A0%E8%BD%BD%E8%A1%A5%E4%B8%81%E6%95%B0%E9%87%8F%EF%BC%88%E9%98%B2%E6%AD%A2%E5%8F%A0%E5%8A%A0%E8%BF%87%E5%A4%9A%EF%BC%89%0APATCH_COUNT%3D%24%28ls%20%2Fsys%2Fkernel%2Flivepatch%2F%202%26gt%3B%2Fdev%2Fnull%20%7C%20wc%20-l%29%0Aif%20%5B%20%26quot%3B%24PATCH_COUNT%26quot%3B%20-gt%205%20%5D%3B%20then%0A%20%20%20%20echo%20%26quot%3BWARNING%3A%20%E5%B7%B2%E5%8A%A0%E8%BD%BD%20%24%7BPATCH_COUNT%7D%20%E4%B8%AA%20Livepatch%EF%BC%8C%E5%BB%BA%E8%AE%AE%E6%B8%85%E7%90%86%E8%BF%87%E6%9C%9F%E8%A1%A5%E4%B8%81%26quot%3B%0Afi%0A%0A%23%204.%20%E9%AA%8C%E8%AF%81%20kpatch%20%E8%A1%A5%E4%B8%81%E4%BF%A1%E6%81%AF%0Akpatch%20info%20%26quot%3B%241%26quot%3B%20%7C%7C%20%7B%0A%20%20%20%20echo%20%26quot%3BERROR%3A%20%E8%A1%A5%E4%B8%81%E6%A8%A1%E5%9D%97%E4%BF%A1%E6%81%AF%E9%AA%8C%E8%AF%81%E5%A4%B1%E8%B4%A5%26quot%3B%0A%20%20%20%20exit%201%0A%7D%0A%0Aecho%20%26quot%3B%E2%9C%85%20%E6%89%80%E6%9C%89%E5%89%8D%E7%BD%AE%E6%A3%80%E6%9F%A5%E9%80%9A%E8%BF%87%EF%BC%8C%E5%8F%AF%E4%BB%A5%E9%83%A8%E7%BD%B2%E8%A1%A5%E4%B8%81%26quot%3B%0A%3C%2Fcode%3E%3C%2Fpre%3E%0A%0A%3Ch3%20id%3D%2243%22%3E4.3%20%E7%81%B0%E5%BA%A6%E5%8F%91%E5%B8%83%E7%AD%96%E7%95%A5%3C%2Fh3%3E%0A%3Cpre%20class%3D%22codehilite%22%3E%3Ccode%20class%3D%22language-bash%22%3E%23%20%E7%AC%AC%E4%B8%80%E9%98%B6%E6%AE%B5%EF%BC%9A%E5%8D%95%E5%8F%B0%E4%BD%8E%E6%B5%81%E9%87%8F%E6%9C%BA%E5%99%A8%E9%AA%8C%E8%AF%81%0Aansible%20-i%20inventory%20%26quot%3Bnode-livepatch-canary%26quot%3B%20-m%20shell%20%5C%0A%20%20%20%20-a%20%26quot%3Bsudo%20kpatch%20install%20kpatch-patch_CVE-2024-xxxx.rpm%26quot%3B%0A%0A%23%20%E7%AC%AC%E4%BA%8C%E9%98%B6%E6%AE%B5%EF%BC%9A%E8%A7%82%E5%AF%9F%E6%8C%87%E6%A0%87%2030%20%E5%88%86%E9%92%9F%0Afor%20i%20in%20%24%28seq%201%206%29%3B%20do%0A%20%20%20%20echo%20%26quot%3B%5B%24%28date%29%5D%20%E6%A3%80%E6%9F%A5%E7%B3%BB%E7%BB%9F%E7%A8%B3%E5%AE%9A%E6%80%A7...%26quot%3B%0A%20%20%20%20%23%20%E6%A3%80%E6%9F%A5%20dmesg%20%E4%B8%AD%E6%98%AF%E5%90%A6%E6%9C%89%20livepatch%20%E7%9B%B8%E5%85%B3%E9%94%99%E8%AF%AF%0A%20%20%20%20dmesg%20%7C%20tail%20-50%20%7C%20grep%20-i%20%26quot%3Blivepatch%5C%7Ckpatch%26quot%3B%20%7C%7C%20echo%20%26quot%3B%20%20OK%26quot%3B%0A%20%20%20%20%23%20%E6%A3%80%E6%9F%A5%E7%B3%BB%E7%BB%9F%E8%B0%83%E7%94%A8%E5%BB%B6%E8%BF%9F%0A%20%20%20%20perf%20stat%20-e%20%27syscalls%3Asys_enter_%2A%27%20-a%20sleep%205%202%26gt%3B%26amp%3B1%20%7C%20grep%20%26quot%3Btime%20elapsed%26quot%3B%0A%20%20%20%20sleep%20300%0Adone%0A%0A%23%20%E7%AC%AC%E4%B8%89%E9%98%B6%E6%AE%B5%EF%BC%9A%E5%85%A8%E9%87%8F%E6%8E%A8%E9%80%81%EF%BC%88%E4%BB%85%E5%9C%A8%E5%89%8D%E5%BA%8F%E9%AA%8C%E8%AF%81%E9%80%9A%E8%BF%87%E6%97%B6%EF%BC%89%0Aansible%20-i%20inventory%20%26quot%3Ball%26quot%3B%20-m%20shell%20%5C%0A%20%20%20%20-a%20%26quot%3Bsudo%20kpatch%20install%20kpatch-patch_CVE-2024-xxxx.rpm%26quot%3B%20%5C%0A%20%20%20%20--when%20canary_passed.stat.exists%0A%3C%2Fcode%3E%3C%2Fpre%3E%0A%0A%3Ch3%20id%3D%2244%22%3E4.4%20%E7%9B%91%E6%8E%A7%E4%B8%8E%E5%91%8A%E8%AD%A6%3C%2Fh3%3E%0A%3Cp%3E%E5%85%B3%E9%94%AE%E7%9B%91%E6%8E%A7%E6%8C%87%E6%A0%87%EF%BC%9A%3C%2Fp%3E%0A%3Cpre%20class%3D%22codehilite%22%3E%3Ccode%20class%3D%22language-yaml%22%3E%23%20prometheus-rules-livepatch.yml%0Agroups%3A%0A%20%20-%20name%3A%20kernel_livepatch%0A%20%20%20%20rules%3A%0A%20%20%20%20%20%20-%20alert%3A%20LivepatchFailed%0A%20%20%20%20%20%20%20%20expr%3A%20node_livepatch_failed_patches%20%26gt%3B%200%0A%20%20%20%20%20%20%20%20for%3A%205m%0A%20%20%20%20%20%20%20%20labels%3A%0A%20%20%20%20%20%20%20%20%20%20severity%3A%20critical%0A%20%20%20%20%20%20%20%20annotations%3A%0A%20%20%20%20%20%20%20%20%20%20summary%3A%20%26quot%3BLivepatch%20%E8%A1%A5%E4%B8%81%E5%8A%A0%E8%BD%BD%E5%A4%B1%E8%B4%A5%20%28instance%20%7B%7B%20%24labels.instance%20%7D%7D%29%26quot%3B%0A%20%20%20%20%20%20%20%20%20%20description%3A%20%26quot%3B%E8%A1%A5%E4%B8%81%20%7B%7B%20%24labels.patch_name%20%7D%7D%20%E5%8A%A0%E8%BD%BD%E5%A4%B1%E8%B4%A5%EF%BC%8C%E5%8F%AF%E8%83%BD%E9%9C%80%E8%A6%81%E6%89%8B%E5%8A%A8%E5%B9%B2%E9%A2%84%26quot%3B%0A%0A%20%20%20%20%20%20-%20alert%3A%20LivepatchStale%0A%20%20%20%20%20%20%20%20expr%3A%20time%28%29%20-%20node_last_patch_applied%20%26gt%3B%2086400%20%2A%207%0A%20%20%20%20%20%20%20%20for%3A%201h%0A%20%20%20%20%20%20%20%20labels%3A%0A%20%20%20%20%20%20%20%20%20%20severity%3A%20warning%0A%20%20%20%20%20%20%20%20annotations%3A%0A%20%20%20%20%20%20%20%20%20%20summary%3A%20%26quot%3B%E8%B6%85%E8%BF%877%E5%A4%A9%E6%9C%AA%E5%BA%94%E7%94%A8%E6%96%B0%20Livepatch%26quot%3B%0A%20%20%20%20%20%20%20%20%20%20description%3A%20%26quot%3B%E5%BD%93%E5%89%8D%E5%86%85%E6%A0%B8%E7%89%88%E6%9C%AC%20%7B%7B%20%24labels.kernel_version%20%7D%7D%EF%BC%8C%E5%AD%98%E5%9C%A8%E6%9C%AA%E4%BF%AE%E5%A4%8D%E7%9A%84%E5%AE%89%E5%85%A8%E9%A3%8E%E9%99%A9%26quot%3B%0A%3C%2Fcode%3E%3C%2Fpre%3E%0A%0A%3Ch2%20id%3D%22kpatch-vs-klgraft%22%3E%E4%BA%94%E3%80%81kpatch%20vs%20klgraft%20%E5%AF%B9%E6%AF%94%3C%2Fh2%3E%0A%3Ctable%3E%0A%3Cthead%3E%0A%3Ctr%3E%0A%3Cth%3E%E7%89%B9%E6%80%A7%3C%2Fth%3E%0A%3Cth%3Ekpatch%EF%BC%88Red%20Hat%EF%BC%89%3C%2Fth%3E%0A%3Cth%3Ekgraft%EF%BC%88SUSE%EF%BC%89%3C%2Fth%3E%0A%3C%2Ftr%3E%0A%3C%2Fthead%3E%0A%3Ctbody%3E%0A%3Ctr%3E%0A%3Ctd%3E%E4%B8%80%E8%87%B4%E6%80%A7%E6%A8%A1%E5%9E%8B%3C%2Ftd%3E%0A%3Ctd%3E%E5%9F%BA%E4%BA%8E%20stack%20checking%3C%2Ftd%3E%0A%3Ctd%3E%E5%9F%BA%E4%BA%8E%20RCU-like%20%E7%9A%84%22world%20view%22%3C%2Ftd%3E%0A%3C%2Ftr%3E%0A%3Ctr%3E%0A%3Ctd%3E%E6%9C%80%E5%A4%A7%E8%A1%A5%E4%B8%81%E6%95%B0%E9%87%8F%3C%2Ftd%3E%0A%3Ctd%3E%E5%BB%BA%E8%AE%AE%20%E2%89%A4%2010%3C%2Ftd%3E%0A%3Ctd%3E%E5%BB%BA%E8%AE%AE%20%E2%89%A4%2020%3C%2Ftd%3E%0A%3C%2Ftr%3E%0A%3Ctr%3E%0A%3Ctd%3E%E6%97%A7%E7%89%88%E6%9C%AC%E6%94%AF%E6%8C%81%3C%2Ftd%3E%0A%3Ctd%3ERHEL%205%2B%3C%2Ftd%3E%0A%3Ctd%3ESLES%2012%2B%3C%2Ftd%3E%0A%3C%2Ftr%3E%0A%3Ctr%3E%0A%3Ctd%3EKLP_REPLACE%20%E6%94%AF%E6%8C%81%3C%2Ftd%3E%0A%3Ctd%3E%E6%98%AF%3C%2Ftd%3E%0A%3Ctd%3E%E9%83%A8%E5%88%86%3C%2Ftd%3E%0A%3C%2Ftr%3E%0A%3Ctr%3E%0A%3Ctd%3E%E5%8E%BB%E6%BF%80%E6%B4%BB%E6%94%AF%E6%8C%81%3C%2Ftd%3E%0A%3Ctd%3E%E5%AE%8C%E6%95%B4%3C%2Ftd%3E%0A%3Ctd%3E%E6%9C%89%E9%99%90%3C%2Ftd%3E%0A%3C%2Ftr%3E%0A%3Ctr%3E%0A%3Ctd%3E%E7%A4%BE%E5%8C%BA%E6%B4%BB%E8%B7%83%E5%BA%A6%3C%2Ftd%3E%0A%3Ctd%3E%E9%AB%98%EF%BC%88%E4%B8%8A%E6%B8%B8%E5%90%88%E5%B9%B6%EF%BC%89%3C%2Ftd%3E%0A%3Ctd%3E%E7%BB%B4%E6%8A%A4%E4%B8%AD%3C%2Ftd%3E%0A%3C%2Ftr%3E%0A%3C%2Ftbody%3E%0A%3C%2Ftable%3E%0A%3Cp%3E%E7%9B%AE%E5%89%8D%20kpatch%20%E5%B7%B2%E8%A2%AB%E4%B8%8A%E6%B8%B8%E5%86%85%E6%A0%B8%E6%8E%A5%E7%BA%B3%EF%BC%88%E8%87%AA%204.0%20%E8%B5%B7%EF%BC%89%EF%BC%8C%E6%98%AF%E4%BA%8B%E5%AE%9E%E4%B8%8A%E7%9A%84%E6%A0%87%E5%87%86%E3%80%82SUSE%20%E4%B9%9F%E5%B7%B2%E5%B0%86%20kgraft%20%E7%89%B9%E6%80%A7%E8%BF%81%E7%A7%BB%E5%88%B0%E4%B8%8A%E6%B8%B8%20Livepatch%20core%E3%80%82%3C%2Fp%3E%0A%3Ch2%20id%3D%22livepatch-ebpf%22%3E%E5%85%AD%E3%80%81%E6%9C%AA%E6%9D%A5%E5%B1%95%E6%9C%9B%EF%BC%9Alivepatch%20%E4%B8%8E%20eBPF%20%E7%9A%84%E7%AB%9E%E5%90%88%3C%2Fh2%3E%0A%3Cp%3EeBPF%20%E4%B8%BA%E7%94%A8%E6%88%B7%E7%A9%BA%E9%97%B4%E6%8F%90%E4%BE%9B%E4%BA%86%E4%B8%80%E7%A7%8D%E6%9B%BF%E4%BB%A3%20Livepatch%20%E7%9A%84%E6%96%B9%E6%A1%88%EF%BC%9A%3C%2Fp%3E%0A%3Cul%3E%0A%3Cli%3E%3Cstrong%3Ekube-bpf-patcher%3C%2Fstrong%3E%EF%BC%9A%E9%80%9A%E8%BF%87%20eBPF%20kprobe%20%E6%88%AA%E8%8E%B7%E5%86%85%E6%A0%B8%E5%87%BD%E6%95%B0%E8%B0%83%E7%94%A8%EF%BC%8C%E5%AE%9E%E7%8E%B0%E7%B1%BB%E4%BC%BC%E7%83%AD%E4%BF%AE%E5%A4%8D%E7%9A%84%E6%95%88%E6%9E%9C%3C%2Fli%3E%0A%3Cli%3E%3Cstrong%3E%E4%BC%98%E5%8A%BF%3C%2Fstrong%3E%EF%BC%9A%E6%97%A0%E9%9C%80%E5%86%85%E6%A0%B8%E6%A8%A1%E5%9D%97%E7%AD%BE%E5%90%8D%E3%80%81%E6%B2%99%E7%AE%B1%E5%AE%89%E5%85%A8%E6%A8%A1%E5%9E%8B%E3%80%81%E5%8A%A8%E6%80%81%E5%8A%A0%E8%BD%BD%3C%2Fli%3E%0A%3Cli%3E%3Cstrong%3E%E5%B1%80%E9%99%90%3C%2Fstrong%3E%EF%BC%9A%E6%97%A0%E6%B3%95%E6%9B%BF%E6%8D%A2%E5%87%BD%E6%95%B0%E4%BD%93%E3%80%81%E4%BB%85%E9%99%90%E4%BA%8E%20tracepoint%2Fkprobe%20hook%20%E7%82%B9%3C%2Fli%3E%0A%3C%2Ful%3E%0A%3Cp%3E%E4%B8%A4%E8%80%85%E5%B0%86%E5%9C%A8%E6%9C%AA%E6%9D%A5%E5%85%B1%E5%AD%98%EF%BC%9ALivepatch%20%E9%80%82%E5%90%88%E5%87%BD%E6%95%B0%E7%BA%A7%E5%AE%89%E5%85%A8%E4%BF%AE%E5%A4%8D%EF%BC%8CeBPF%20%E9%80%82%E5%90%88%E8%A7%82%E6%B5%8B%E5%92%8C%E7%AD%96%E7%95%A5%E6%8B%A6%E6%88%AA%E3%80%82%3C%2Fp%3E%0A%3Ch2%20id%3D%22_2%22%3E%E4%B8%83%E3%80%81%E6%80%BB%E7%BB%93%3C%2Fh2%3E%0A%3Cp%3ELinux%20Kernel%20Livepatch%20%E6%98%AF%E7%94%9F%E4%BA%A7%E7%8E%AF%E5%A2%83%E4%B8%AD%E4%B8%8D%E5%8F%AF%E4%B8%AD%E6%96%AD%E6%9C%8D%E5%8A%A1%E7%9A%84%E5%85%B3%E9%94%AE%E4%BF%9D%E9%9A%9C%E6%8A%80%E6%9C%AF%E3%80%82%E5%85%B6%E6%A0%B8%E5%BF%83%E4%BB%B7%E5%80%BC%E5%9C%A8%E4%BA%8E%EF%BC%9A%3C%2Fp%3E%0A%3Col%3E%0A%3Cli%3E%3Cstrong%3E%E9%9B%B6%E5%81%9C%E6%9C%BA%E4%BF%AE%E5%A4%8D%3C%2Fstrong%3E%EF%BC%9A%E5%9F%BA%E4%BA%8E%20ftrace%20%E8%B7%B3%E6%9D%BF%E5%AE%9E%E7%8E%B0%E7%BA%B3%E7%A7%92%E7%BA%A7%E5%87%BD%E6%95%B0%E6%9B%BF%E6%8D%A2%3C%2Fli%3E%0A%3Cli%3E%3Cstrong%3E%E5%AE%89%E5%85%A8%E5%8F%AF%E9%9D%A0%3C%2Fstrong%3E%EF%BC%9A%E4%B8%80%E8%87%B4%E6%80%A7%E6%A8%A1%E5%9E%8B%E7%A1%AE%E4%BF%9D%E6%97%A7%E5%87%BD%E6%95%B0%E6%89%A7%E8%A1%8C%E5%AE%8C%E6%AF%95%E5%90%8E%E5%88%87%E6%8D%A2%3C%2Fli%3E%0A%3Cli%3E%3Cstrong%3E%E5%B7%A5%E7%A8%8B%E6%88%90%E7%86%9F%3C%2Fstrong%3E%EF%BC%9Akpatch%20%E5%B7%B2%E8%A2%AB%E4%B8%8A%E6%B8%B8%E5%86%85%E6%A0%B8%E6%8E%A5%E7%BA%B3%EF%BC%8CRed%20Hat%20%E6%8F%90%E4%BE%9B%E4%BC%81%E4%B8%9A%E7%BA%A7%E6%94%AF%E6%8C%81%3C%2Fli%3E%0A%3Cli%3E%3Cstrong%3E%E9%83%A8%E7%BD%B2%E5%8F%AF%E6%8E%A7%3C%2Fstrong%3E%EF%BC%9A%E6%94%AF%E6%8C%81%E7%81%B0%E5%BA%A6%E5%8F%91%E5%B8%83%E3%80%81%E4%B8%80%E9%94%AE%E5%9B%9E%E6%BB%9A%E5%92%8C%E8%87%AA%E5%8A%A8%E5%8C%96%E8%BF%90%E7%BB%B4%3C%2Fli%3E%0A%3C%2Fol%3E%0A%3Cp%3E%E6%8E%8C%E6%8F%A1%20Livepatch%20%E6%8A%80%E6%9C%AF%EF%BC%8C%E5%B0%86%E4%BD%BF%E5%86%85%E6%A0%B8%E8%BF%90%E7%BB%B4%E4%BB%8E%22%E8%A2%AB%E5%8A%A8%E7%AD%89%E5%BE%85%E9%87%8D%E5%90%AF%E7%AA%97%E5%8F%A3%22%E8%BD%AC%E5%8F%98%E4%B8%BA%22%E4%B8%BB%E5%8A%A8%E5%8D%B3%E6%97%B6%E4%BF%AE%E5%A4%8D%E5%AE%89%E5%85%A8%E5%A8%81%E8%83%81%22%EF%BC%8C%E6%98%AF%E6%9E%84%E5%BB%BA%E9%AB%98%E5%8F%AF%E7%94%A8%E3%80%81%E9%AB%98%E5%AE%89%E5%85%A8%20Linux%20%E5%9F%BA%E7%A1%80%E8%AE%BE%E6%96%BD%E7%9A%84%E9%87%8D%E8%A6%81%E4%B8%80%E7%8E%AF%E3%80%82%3C%2Fp%3E%0A%3C%2Farticle%3E