KernelCare for Ubuntu | TuxCare

Experience the Only Rebootless Patching Solution that Truly
Delivers the Core Benefits that Rebootless Patching Was Designed for

Complete CVE
Coverage

KernelCare provides live patches for up to 100% of Ubuntu vulnerabilities, far surpassing the mere 5-10% coverage offered by Canonical Livepatch.

Supreme Stability
and Uptime

KernelCare keeps your Ubuntu systems running uninterrupted for as long as you choose, unlike Livepatch, which disrupts stability with rigid reboot deadlines.

Fully Rebootless
Experience

KernelCare offers rebootless patches for components that typically require reboots, like critical userspace, hypervisors, and IoT devices – which Livepatch doesn’t cover.

Vendor-Agnostic
Solution

Unlike Canonical Livepatch, which limits rebootless patching to only Ubuntu systems, KernelCare delivers live patching for your entire Linux server fleet.

See How KernelCare Stacks Up 
to Canonical Livepatch

Livepatch

KernelCare Enterprise
Supported distributions Ubuntu LTS 14.04, 16.04, 18.04, 20.04,
22.04, and 24.04
Ubuntu LTS 14.04, 16.04, 18.04, 20.04,
22.04, and 24.04, as well as Red Hat,
Oracle, AlmaLinux and many others
All vulnerabilities patched
Only 5-10% of Ubuntu CVEs
Support for arm64 architectures
Coverage for Linux kernel & critical userspace
Kernel Only
Practically unlimited kernel patching lifetime
Custom Patches
QEMU Patching
Single patchset distribution for all patches
Available APIs
Rebootless roll-back functionality
with a reboot

rebootless
24/7 Support
with a paid subscription

online, 24/7/365
New Client Availability
Only for Ubuntu clients

(more than 60 distro versions supported)
Add-ons Custom patches, QEMU, IoT
Devices, Shared Libraries
Cost Included as part of all Ubuntu Pro
packages ($225-$3,400/machine/year).
From $50 per system per year, bulk pricing available

 

Find out how AppSignal switched from Livepatch to
KernelCare Enterprise to achieve fewer reboots

“With Livepatch, it was always vague when we should reboot and if we should
reboot. You have to reboot in some cases, but not in others, and nobody could
really tell us the difference. We couldn’t really figure it out, and nobody at
Canonical was able to tell us.”

-Thijs Cadier, Co-Founder of AppSignal on Switching from Canonical to TuxCare

Choose the KernelCare Tier
That Suits Your Needs Best

Starter

For tech enthusiasts and organizations
with smaller infrastructures seeking
seamless security and uptime for their
Linux systems

Includes:

  • Rebootless kernel patching
  • Up to 100% CVE coverage
  • Unlimited kernel patching lifetime
  • Support for 70+ distro versions

*Supports up to 199 systems

Standard

For Linux infrastructures demanding heightened security measures and adherence to internal and external compliance requirements

Everything in Starter plus:

  • Centralized management
  • Customizable patching workflows
  • Rebootless patching for critical shared libraries (add-on)
  • Deployment in air-gapped networks
  • Support for multiple users/business units

Enterprise

For enterprises whose Linux operations need high availability, backed by dedicated support and procurement flexibility large organizations require

Everything in Standard plus:

  • Single sign-on
  • High-availability
  • Onboarding support
  • Dedicated CSM
  • Agreement redlines
  • Vendor security review

KernelCare Enterprise Patches All Popular Enterprise Linux Distros without Reboots, Including

Read the KernelCare Documentation Check Your Kernel and OS Compatibility

Have a question about KernelCare?

Ask one of our Linux patching experts.