I am scanning Linux server which has two kernels versions stored, when I run following command I can see for example this version:
user@host [~]# rpm -q kernel
kernel-3.10.0-327.el7.x86_64
kernel-3.10.0-1062.4.1.el7.x86_64
When I run this command, which identifies the current kernel version that is being utilized on the server this is new version.
user@host [~]# uname –sr
Linux 3.10.0-1062.4.1.el7.x86_64
My security scanner reported that I have many vulnerabilities because of using kernel-3.10.0-327.el7.
Questions:
- Does this mean that this is false positive because I am not using this version on the server?
- Where can I check if kernel-3.10.0-1062.4.1.el7.x86_64 is the latest kernel version?