This is even simpler to check for now. Kernel packages create /run/reboot-required and add their package name to /run/reboot-required.pkgs, so you can just check for those files. I would welcome an enhancement to checkrestart that said something about these files, so that you know from checkrestart's output when you're not running the latest kernel that you have installed.
pEpkey.asc
Description: application/pgp-keys
