diff --git a/CHANGELOG.md b/CHANGELOG.md
index d1ab833..8cad937 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,8 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 
 ### v3.9.x - [Unreleased]
 
+### v3.12.0 - 2020-05-11
+
 #### Added
 
 - Set opcache.preload_user for PHP 7.4
@@ -31,6 +33,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 - WordOps installation failure with pip
 - Installation on raspberry pi 4
 - Fail2ban configuration when Nginx is not installed
+- Wo-kernel systemd service start failure
 
 ### v3.11.4 - 2020-01-17
 
diff --git a/install b/install
index de8094b..951ec10 100755
--- a/install
+++ b/install
@@ -9,7 +9,7 @@
 # -------------------------------------------------------------------------
 # wget -qO wo wops.cc && sudo -E bash wo
 # -------------------------------------------------------------------------
-# Version 3.12.0 - 2020-04-24
+# Version 3.12.0 - 2020-05-12
 # -------------------------------------------------------------------------
 
 # CONTENTS
@@ -644,6 +644,12 @@ wo_woconf() {
     fi
 }
 
+wo_fix_kernel() {
+    if [ -f /opt/wo-kernel.sh ]; then
+        chmod +x /opt/wo-kernel.sh
+    fi
+}
+
 wo_init() {
 
     ###
@@ -718,6 +724,7 @@ else
     if [ -x /usr/local/bin/wo ]; then
         _run wo_clean
         _run wo_woconf
+        _run wo_fix_kernel
         # 2 - Migration from EEv3
     else
         if [ -x /usr/local/bin/ee ]; then
diff --git a/wo/cli/plugins/stack_pref.py b/wo/cli/plugins/stack_pref.py
index 0c46003..751a2b9 100644
--- a/wo/cli/plugins/stack_pref.py
+++ b/wo/cli/plugins/stack_pref.py
@@ -1709,6 +1709,7 @@ def pre_stack(self):
         if not os.path.isfile('/opt/wo-kernel.sh'):
             WOTemplate.deploy(self, '/opt/wo-kernel.sh',
                               'wo-kernel-script.mustache', data)
+        WOFileUtils.chmod(self, '/opt/wo-kernel.sh', 0o700)
         if not os.path.isfile('/lib/systemd/system/wo-kernel.service'):
             WOTemplate.deploy(
                 self, '/lib/systemd/system/wo-kernel.service',