Extended Lifecycle Support for Ubuntu 18.04

php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

Ubuntu is a powerful, flexible OS used by organizations large and small, but enterprise environments demand continuous security, long-term support, and timely security updates.

While Ubuntu Pro provides end-of-life security and rebootless patching, TuxCare not only matches these offering types but takes them further, delivering longer-lasting protection, more comprehensive coverage, and a truly proactive approach to security – all at a lower cost.

Why Choose TuxCare for Ubuntu?

Endless Lifecycle Support without the Limitations of Canonical

Ubuntu Pro cuts you off after 5 years while TuxCare ELS keeps Ubuntu 20.04, 18.04, and 16.04 secure for as long as you need so you can stay secure on your terms.

Real Non-Disruptive Security – Not a False Promise of Rebootless Patching, like Livepatch

Livepatch leaves you exposed to 90% of CVEs and still requires reboots – KernelCare delivers uninterrupted security without compromises.

Custom Kernel Development

Unlock enhanced performance, security, and compatibility with a tailored kernel for your Ubuntu systems, purpose-built for your workloads.


KernelCare Enterprise

The Only Rebootless Patching Solution for Ubuntu with 100% CVE coverage

Canonical offers rebootless patching with its Livepatch tool, but it falls short where it matters most – leaving you exposed to over 90% of known Ubuntu vulnerabilities. In fact, Canonical’s “sliding support window” also forces reboots (KernelCare doesn’t).


TuxCare
Endless Lifecycle Support

Livepatch
CVE Coverage Up to 100% Only 5-10%
Reboot Frequency Never
Only reboot when you choose to
Occasional forced reboots
in line with Canonical’s rigid reboot schedule
Rebootless Patching Beyond the Linux Kernel Critical userspace, hypervisors,
and IoT environments
Support for Other Distros Over 60 distro versions
of RHEL, Oracle Linux, AlmaLinux, Rocky Linux, Debian, and several others

Want to see all the detailed critical
differences between KernelCare Enterprise
and Canonical Livepatch?

Canonical vs. TuxCare

It patches the kernel as well as glibc and OpenSSL. It completely replaces
instead of patches, so we would not have to reboot at all.

-Thijs Cadier, Co-Founder of AppSignal on Switching from Canonical to TuxCare

Endless Lifecycle Support (ELS) for Ubuntu

Ongoing long-term security fixes for end-of-life Ubuntu versions 16.04, 18.04, and 20.04

Canonical’s security updates for end-of-life Ubuntu versions have ended, but TuxCare’s patches won’t. We’ll provide you with
ongoing vulnerability fixes for your end-of-life Ubuntu versions for as many years as you want – keeping you patched, compliant,
and compatible for as long as you need.

Not All Ubuntu EOL
Solutions Are Equal -
See How We Compare

TuxCare
Endless Lifecycle Support

Canonical
Ubuntu Pro
Security updates for packages in Ubuntu
Main repository past the
EOL date
Up to 5 years
Support for packages in Ubuntu Main
repository
24/7 break/fix ticket support1 Available in higher tiers
Rebootless patching for Ubuntu kernels
with complete CVE coverage
Yes. Optional component. Limited. Canonical Livepatch covers
less than 10% of Ubuntu kernel CVEs.
Pricing $92
annually per server
(or as low as $42.50 per server
without the rebootless patching)
$225
and up / annually per server

1 For a list of base packages

Custom Kernel Development and Maintenance

Need a tailor-made Linux kernel to address the specific needs of your environment?
Let us handle the heavy lifting.

Ubuntu-designed kernel variants target the most common use cases, while the TuxCare Custom Kernel Development service offers
unparalleled flexibility, allowing you to meet the specific kernel requirements of your workloads.

Tailored Kernel Solutions for Optimal Performance and Security

Our experts deliver a streamlined kernel, while providing comprehensive support throughout the development lifecycle for seamless integration and enhanced performance.

Proactive Security with Continuous CVE Monitoring and Patching

We continuously track kernel CVEs and upstream changes, delivering timely security patches to mitigate vulnerabilities, strengthen defenses, and ensure your systems remain fully protected.

Uninterrupted Security with Rebootless Patching

With our KernelCare technology, we provide critical security fixes and patches without the need for system reboots. This ensures your systems remain secure and fully operational 24/7, minimizing downtime and maintaining continuous availability.

Tailored Maintenance for Long-Term Kernel Stability

We tailor our support schedule to match your needs, whether you require a stable release for years or prefer frequent updates. This ensures the longevity of your kernel investment, allowing you to focus on your business.

Why TuxCare?

We’ve released over 170,000 patches – and growing – without reboots

Infrastructure agnostic: 
on-premise or cloud compatible

Out-of-the-box integration with automation tools, vulnerability scanners, and more

Deployment assistance and 24/7 priority support 365 days a year

Ask Us a Question

Reach out to our Ubuntu security experts to get more information on
protecting your unique environment

Get Pricing

Tell us a little bit about your environment and get
a custom quote