Hacker News Reader

Delpoyed boxes: ksplice / kpatch or run updates when available.

And consider mitigations at various tech stack layers.

I haven't found a way to patch a kernel with nontrivial modules without kernel restart. This makes the mechanism only useful to reduce system reboot times after a patch.

Reply on news.ycombinator.com