KernelCare for Ubuntu | TuxCare

Minimize Your Risk While Maintaining
100% Uptime of Your Systems

Eliminate Maintenance Windows

Leave the chaos of coordinating patching-related maintenance windows behind and regain control over your schedule

Streamline Security Compliance

Ensure continuous compliance with tightening regulatory requirements and various cybersecurity standards

Minimize Vulnerability Risk

Apply kernel security updates as soon as they become available and win the race against vulnerability exploits

Cut Operational Costs

Achieve major cost savings by eliminating downtime and removing the hassle of managing system reboots

Considering or currently using Canonical Livepatch?

Find out how AppSignal switched from Canonical Livepatch
to KernelCare Enterprise to achieve fewer reboots

Read Their Story

KernelCare Enterprise Patches All Popular Enterprise Linux Distros without Reboots, Including

Read the KernelCare Documentation Check Your Kernel and OS Compatibility

The TuxCare Rebootless Live Patching Process

As soon as a new vulnerability affecting a Linux kernel is announced, the TuxCare
team immediately gets to work on a rebootless patch.

KernelCare Enterprise then deploys each patch in less than a nanosecond:

1

We Create the Patch

We create code that patches insecure kernel code with a secure but functionally equivalent replacement.

2

We Prepare the Patch for
Deployment

We compile every patch that impacts the affected kernel and deploy it to our distribution servers.

3

You Receive the Patch

A KernelCare process running on your server checks our distribution servers every 4 hours. If a new patch is available, it can then be downloaded and applied to your running kernel.

4

KernelCare Applies

the Patch

The KCE kernel module – in a matter of nanoseconds – loads the updated binary into the secure kernel space and redirects all functions to the updated code – and the kernel resumes.

Because this happens in nanoseconds, no processes are
interrupted, and no failover condition is ever triggered

Try KernelCare Enterprise for
Ubuntu with zero commitment

Ask Us a Question

Considering rebootless patching with
Canonical Livepatch?

Find out why our affordable KernelCare Enterprise is likely a better choice for your team:

Canonical

Livepatch
KernelCare Enterprise
Supported distributions Ubuntu LTS 14.04, 16.04, 18.04, 20.04, 22.04 Ubuntu LTS 14.04, 16.04, 18.04, 20.04, 22.04, as well as Red Hat, Oracle, AlmaLinux and many others
All vulnerabilities patched
Only a subset of High & Critical vulnerabilities
Support for x86-64 and arm64 architectures
Coverage for Linux kernel & critical userspace
Kernel Only
Practically unlimited kernel patching lifetime
Custom Patches
QEMU Patching
Single patchset distribution for all patches
Available APIs
Rebootless roll-back functionality
with a reboot
rebootless
24/7 Support
with a paid subscription
online, 24/7/365
New Client Availability
Only for Ubuntu clients
(more than 60 distro versions supported)
Add-ons Custom patches, QEMU, IoT
Devices, Shared Libraries
Cost Included as part of all Ubuntu Pro
packages ($225-$3,400/machine/year).		 $49.50 per year per system, different
add-ons can be included in the
subscription, bulk pricing is available

 

Why KernelCare Enterprise Over Canonical Livepatch?

Support for Mixed
Linux Environments

Using more distributions than just Ubuntu? KernelCare delivers rebootless patches to all of them.

An Affordable
Standalone Solution

KernelCare is an independent rebootless patching tool that doesn’t come as part of a costly premium support membership.

Patching Beyond
the Kernel

Put patching on autopilot for shared libraries (glibc, OpenSSL), IoT devices, and QEMU virtualization systems, so you never need to reboot.

Patch All 

Vulnerabilities

Canonical Livepatch only delivers rebootless patches for High and Critical Vulnerabilities. KernelCare covers all vulnerabilities and offers custom patches as well.

Have a question about KernelCare?

Ask one of our Linux patching experts.

Ask Us a Question