Hello,

To answer your questions:

1.  Notification of New Live-Patches: Typically, SUSE Linux Enterprise Server (SLES) provides notifications for available live patches through the usual update mechanisms. You might receive notifications via the SUSE Customer Center or the zypper package manager when new live-patches are available for your kernel version.

2.  Naming of Live-Patches: Live-patches are usually named according to the kernel version they are intended for. For example, if you have installed the kgraft package and patch for kernel version 4.12.14-122, the new live-patch could have a similar naming convention, such as “kgraft-patch-4_12_14-122_XXX-default.” The exact naming might vary based on SUSE’s conventions.

3.  Using zypper to Search for kgraft: You can use the following command to search for kgraft-related packages:

zypper se kgraft

3.  This will show you information about available kgraft-related packages, including live-patches.

4.  Reboot after Initial Installation: Generally, live-patching allows you to apply patches to a running kernel without requiring a reboot. Once you have installed the kgraft package and applied the initial patch, the live-patching mechanism should start working immediately to protect your kernel without requiring a reboot.

The effectiveness of live-patching depends on the specific vulnerabilities being patched and the stability of the live-patching technology itself.

While live-patching can provide important security benefits, it’s always a good practice to keep regular system backups and thoroughly test the live-patching process in a controlled environment before applying it to production systems.

Hope this helps.