; ▁Pro x m ox ▁V E ▁ 3 . x , ▁ 4 . x ▁and ▁ 5 . x ; ▁V irt - SI G / X en 4 Cent OS ; ▁Deb ian ▁ 6 . x , ▁ 7 . x , ▁ 8 . x ▁and ▁ 9 . x ; ▁and ▁Ubuntu ▁ 1 4 . 0 4 ▁L TS , ▁ 1 6 . 0 4 ▁L TS ▁and ▁ 1 8 . 0 4 ▁L TS . ▁ ▁Over view ▁▁ ▁K ernel C are ▁agent ▁res ides ▁on ▁user ' s ▁server . ▁It ▁period ically ▁checks ▁in ▁with ▁K ernel C are ▁distribution ▁servers . ▁If ▁there ▁are ▁new ▁patch es ▁available ▁for ▁the ▁currently ▁running ▁kernel , ▁K ernel C are ▁agent ▁download s ▁and ▁applies ▁those ▁patch es ▁to ▁the ▁running ▁kernel . ▁ ▁A ▁K ernel C are ▁patch ▁is ▁a ▁piece ▁of ▁code ▁used ▁to ▁substitute ▁vulner able ▁or ▁bug gy ▁code ▁in ▁a ▁kernel . ▁It ▁can ▁be ▁an ▁arbitrary ▁code ▁line ▁modification , ▁or ▁it ▁can ▁be ▁a ▁missing ▁security ▁check , ▁a ▁set ▁of ▁functions , ▁or ▁even ▁modified ▁data ▁structures . ▁The ▁patch ▁is ▁compiled ▁as ▁usual , ▁but ▁the ▁generated ▁code ▁has ▁additional ▁information ▁about ▁all ▁changed ▁code ▁pieces ▁caused ▁by ▁original ▁source ▁code ▁modification ▁and ▁information ▁on ▁to ▁how ▁to ▁apply ▁these ▁code ▁pieces . ▁The ▁resulting ▁code ▁modifications ▁are ▁safely ▁applied ▁to ▁the ▁running ▁kernel . ▁ ▁A ▁special ▁K ernel C