What is a Kernel?
The kernel is the primary component of a server operating system, serving as the foundation that delivers essential services to all other elements of the OS.
Why is it necessary to update the kernel?
Meltdown and Spectre are vulnerabilities that exploit processor weaknesses, allowing programs to capture data currently being processed on a machine. Updating these releases can help mitigate the risk.
Below steps how to perform:
A) Linux OS:
Apply the kernel version update according to your current OS version:
OS Version: CL6 ( End-of-life )
Kernel version that fixed the issue: 2.6.32-896.16.1.lve1.4.49.el6
Command to run:
yum clean all && yum update kernel-firmware && yum install kernel-2.6.32-896.16.1.lve1.4.49.el6
OS Version: CL7
Kernel version that fixed the issue: 3.10.0-714.10.2.lve1.5.8.el7
Command to run:
yum clean all --enablerepo=cloudlinux-updates-testing && yum update linux-firmware microcode_ctl && yum install kernel-3.10.0-714.10.2.lve1.5.8.el7 --enablerepo=cloudlinux-updates-testing
OS Version: Centos6 ( End-of-life )
Kernel version that fixed the issue: 2.6.32-696.18.7.el6.x86_64
Command to run:
yum clean all; yum update kernel-2.6.32-696.18.7.el6.x86_64
OS Version: Centos7
Kernel version that fixed the issue: 3.10.0-693.11.6.el7.x86_64
Command to run:
yum clean all; yum update kernel-3.10.0-693.11.6.el7.x86_64
How to verify that you run the update correctly?
Inside your SSH, run the following command to check:
=====
cat /etc/redhat-release
uname -r
=====
B) Windows OS:
Apply the Windows operating system update according to your current server version:
Windows Server 2008 R2
Steps to update:
https://support.microsoft.com/en-us/help/4056897
Windows Server 2012 R2
Steps to update:
https://support.microsoft.com/en-us/help/4056898
Windows Server 2016
Steps to update:
https://support.microsoft.com/en-us/help/4056890
How to verify that you run the update correctly?
Speculation Control Validation PowerShell Script:
https://gallery.technet.microsoft.com/scriptcenter/Speculation-Control-e36f0050