Red Hat delivers kernel live patching as a kernel module (kmod) in an RPM package. Standard subscriptions provide access to live patches through regular channels. Without extended support, new patches for the current minor release stop when the next minor release becomes available.

For example, with a standard subscription, you can live patch the RHEL 10.2 kernel until Red Hat releases the RHEL 10.3 kernel. After that release, Red Hat no longer provides live patches for RHEL 10.2.

The components of kernel live patching are as follows:

Kernel patch module

• The delivery mechanism for kernel live patches.
• A kernel module built specifically for the kernel being patched.
• The patch module contains the code of the required fixes for the kernel.
• Patch modules register with the livepatch kernel subsystem and specify the original functions to replace, along with pointers to the replacement functions. Kernel patch modules are delivered as RPMs.
• The naming convention is kpatch_<kernel version>_<kpatch version>_<kpatch release>. The "kernel version" part of the name has dots replaced with underscores.

The kpatch utility

A command-line utility for managing patch modules.

The kpatch service

A systemd service required by multiuser.target. This target loads the kernel patch module at boot time.

The kpatch-dnf package

A DNF plugin delivered in the form of an RPM package. This plugin manages automatic subscription to kernel live patches.