0

I have installed a linux distro and I "think" it is vulnerable to kernel exploits. I have to update kernel but I need to know if it is really compiled in year 2003? How can I know if additional updates are made to the kernel?

Linux gandalf 2.4.21-4.ELsmp #1 SMP Fri Oct 3 17:52:56 EDT 2003 i686 i686 i386 GNU/Linux

Does also "smp" mean that it is safe from latest threats or something? Thank you.

4 Answers 4

1

http://rpm.pbone.net/index.php3/stat/4/idpl/1537823/com/kernel-2.4.21-4.EL.i686.rpm.html confirms that your kernel is indeed from 2003.

0

SMP means it supports multi-processors -- see Symmetric multiprocessing.

A 2.4.21 kernel is quite old... according to kernel.org, the latest version of the 2.4 branch is 2.4.37.9

And judging from the list of changelogs of the 2.4 branch, it seems it's indeed been released in 2003.

1
  • 1
    While the kernel is indeed old, remember that the EL (Enterprise Linux) kernels released by RedHat contain backports of fixes that were in later kernel revisions. In this case, I would doubt there were too many backported fixes to the kernel he was running due to the compile date compared to the release date of the original 2.4.21.
    – deleted
    Apr 2, 2010 at 19:07
0

I think you're asking the wrong question here - you want to know whether your kernel has all the security updates you care about. The way you find out is from the kernel's version number, not from when it was built. This isn't necessarily easy if you want to know all the gory details; you'll have to research not only the mainline features/fixes added since 2.4.21 but also the backported fixes in RHEL (mentioned in cd34's comment) which may make up some (but probably not all) of the gap.

0

How to know when the kernel was last compiled?

Have you considered just looking at the date of the file? That should be a pretty good indication of the age unless you are doing something weird. I don't think I have ever seen any systems that modify the date of the kernel file to the future.

Typically kernels are stored in /boot but it may also exist as a file named /vmlinuz. Look at your bootloader for exact details.

For the record 2.4.21 is ancient.

You must log in to answer this question.