Canonical moves Ubuntu kernel fixes to weekly releases and promises workarounds within 48 hours

Canonical moves Ubuntu kernel fixes to weekly releases and promises workarounds within 48 hours

23 September 2026 — Canonical, the company behind Ubuntu, said on 23 September 2026 that it is changing how it ships Linux kernel updates. Its separate four-week regular cycle and two-week security cycle are being replaced by one two-week cycle. Because the cycles overlap, a new kernel will be released every week. The Register, Help Net Security and Linuxiac reported the change on 23 and 24 September.

What changes

In the new cycle, the first week is used for builds and smoke tests, with candidate kernels published to the -proposed pocket. The second week is used for certification, integration and regression testing. Customers who cannot wait can start their own acceptance testing on the -proposed candidates after the first week, though those builds are not yet certified.

Canonical also commits, "whenever possible", to publishing a workaround or hardening advice within 24 to 48 hours of a flaw being disclosed, when a patch is not yet ready. It gives the reason as a sharp rise in the number of kernel CVEs, driven by AI-assisted bug finding and by the kernel project issuing its own CVE numbers since 2024.

Canonical's post does not give a date from which the new cycle starts, and none of the reports we read does either. One search summary names 28 September; we have found no source for that date and do not repeat it as fact.

Who is affected

Operations teams running Ubuntu servers, and businesses that buy hosting, managed Kubernetes or appliances built on Ubuntu. Twice as many kernel releases means twice as many potential reboot or livepatch windows.

What to do

• Check that your patch and reboot automation, or Canonical Livepatch, can handle a weekly kernel release without manual steps.
• Decide whether your change process needs a standing weekly window for kernel updates.
• If you pay for Ubuntu Pro, note the 24 to 48 hour workaround commitment and hold Canonical to it when a serious flaw is disclosed.
• If a provider runs Ubuntu for you, ask how it will handle the new cadence.

Sources

• Canonical: Accelerating delivery of CVE fixes with a new kernel release strategy — 23 September 2026
• The Register: CVE flood pushes Ubuntu onto weekly kernel release cycle — 24 September 2026
• Help Net Security: Ubuntu kernel CVE fixes are moving to a weekly release schedule — 24 September 2026
• Linuxiac: Ubuntu kernels move to weekly releases for faster CVE fixes — 23 September 2026