As I recall, this sort of thing generally gets Carrier Grade folks all hot and bothered, so I thought I would send a pointer to some really cool work that a friend of mine from MIT has just recently completed: http://web.mit.edu/ksplice A technical paper describing the technology, "Ksplice: An automatic system for rebootless Linux kernel security updates", is available here: http://web.mit.edu/ksplice/doc/ksplice.pdf Best of all, it doesn't require any kernel patches, so you can use Ksplice to patch a Linux kernel you currently have running on your system right now. :-) - Ted