Kernel live patching with kpatch applies a defined class of security and bug fixes while the system runs, but you must follow rules that keep other tools from blocking patches. The list below covers kpatch scope and restrictions on SystemTap and kprobe while a live patch is active.

• Intended scope: The kpatch feature can apply simple security and bug fix updates that do not require an immediate system reboot.
• SystemTap and kprobe: You must not use the SystemTap or kprobe tool during or after loading a patch. The patch might not take effect until the probes are removed.