kGraft icon
kGraft icon

kGraft

kGraft is a feature of the Linux kernel that implements live patching of a running kernel, which allows kernel patches to be applied while the kernel is still running.

Without additional logic in place, not replacing patched functions atomically could lead to inconsistencies.

Cost / License

  • Freemium (Subscription)
  • Proprietary

Platforms

  • SUSE Linux Enterprise
Each process is monitored so it executes a patched function consistently within a single system call.
After everything migrates to a new "universe", trampoline-style checks are no longer needed.
+2
kGraft screenshot 3
kGraft alternatives  
-
No reviews
0likes
0comments
4alternatives
0news articles

Features

Suggest and vote on features
No features, maybe you want to suggest one?

 Tags

  • suse
  • linux-kernel
  • livepatch

kGraft News & Activities

Highlights All activities

Recent activities

No activities found.

kGraft information

  • Developed by

    DE flagSUSE

  • Licensing

    Proprietary and Freemium product.

  • Pricing

    Subscription ranging between $800 and $6800 per month + free version with limited functionality.

  • Alternatives

    4 alternatives listed

  • Supported Languages

    • English
kGraft was added to AlternativeTo by edmundlaugasson on and this page was last updated .
No comments or reviews, maybe you want to be first?
Post comment/review

What is kGraft?

From author's website: Apply patches to your Linux kernel without rebooting your system. Keep your apps running while you patch the Linux kernel for critical updates. Maximize uptime for a wide range of business-critical applications like AI/ML apps, big data analytics, SQL databases or in-memory database applications such as SAP HANA.

Features - https://www.suse.com/products/live-patching/features/

Documentation

About source code availability https://forums.opensuse.org/showthread.php/392445-sled-sles-source-code-availability

By avoiding the need for rebooting the system with a new kernel that contains the desired patches, kGraft aims to maximize the system uptime and availability. At the same time, kGraft allows kernel-related security updates to be applied without deferring them to scheduled downtimes. Internally, kGraft allows entire functions in a running kernel to be replaced with their patched versions, doing that safely by selectively using original versions of functions to ensure per-process consistency while the live patching is performed.

kGraft is developed by SUSE, with its source code licensed under the terms of versions two and three of the GNU General Public License (GPL). In April 2014, kGraft was submitted for inclusion into the Linux kernel mainline, and the minimalistic foundations for live patching were merged into the Linux kernel mainline in kernel version 4.0, which was released on April 12, 2015.

More at:

kGraft Videos

Show 5 more videos

Official Links