Ubuntu Livepatch Now Supports Arm64

Ubuntu Livepatch Now Supports Arm64 for Rebootless Kernel Updates

Do Son June 25, 2026 2 minutes read

Canonical’s Livepatch service now supports the Arm64 platform. Livepatch is a value-added service from Canonical. It installs important kernel security updates without downtime or a reboot. For servers that must run reliably for long stretches, this matters a lot. The service keeps systems secure and solves a common headache: some updates only take effect after a restart.

Support Comes to the Arm64 Platform

Arm64-based servers are now more common than ever. Many of the free instances people grab from Oracle, for example, run on Arm64. So Canonical has announced that Livepatch now supports the Arm64 architecture. Specifically, Ubuntu Core 26 and later support Livepatch on Arm64. The regular amd64 platform, by contrast, has had Livepatch since Ubuntu Core 20.

Beyond Ubuntu Core 26, Arm64 systems on Ubuntu 26.04 LTS can use Livepatch too. So if you still run an older Ubuntu release, it may be worth setting aside time to upgrade.

Why the Kernel Is the Exception

Most regular package updates do not need a reboot. The kernel, however, is the exception. A kernel update usually requires a restart to boot into the new version. Livepatch exists mainly to solve that. It lets a server use the new kernel without rebooting. As a result, you can apply the latest kernel fixes and keep the system running.

Free for Up to 5 Personal Devices

Livepatch is part of the paid Ubuntu Pro service. Even so, Canonical offers free access for personal use. In short, individuals can use an Ubuntu Pro subscription on up to five devices. Livepatch is one of the services included in Ubuntu Pro. So you only need a supported release and a free Ubuntu Pro account.

You can register on the Ubuntu Pro subscribe page. After registering, grab your Ubuntu Pro token. Then run a few commands on the system to finish the setup and use Livepatch for free.

How to Enable Livepatch

# Attach your subscription 
sudo pro attach <your-token> 
# Enable the Livepatch service 
sudo pro enable livepatch 
# Check the service status 
canonical-livepatch status 
# Or 
sudo pro status

One note worth keeping in mind: Livepatch does not replace regular updates. It targets only critical and high-severity kernel issues. Canonical still recommends an occasional reboot, since long uptimes can build up other state problems that a livepatch cannot clear.

Support Our Threat Intelligence

If you find our CVE report and cybersecurity news helpful, consider supporting our work.

Buy Me a Coffee PayPal

Written by

@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.