canonical-livepatch11.1.0

canonical-livepatch applies selected security fixes to a running Linux kernel, allowing the machine to stay online while certain serious vulnerabilities are addressed. It focuses on high- and critical-severity kernel vulnerabilities, so its role is targeted kernel maintenance rather than general software updating. The client operates on the local machine and periodically checks whether a relevant live patch is available.

When a matching fix is found, canonical-livepatch can apply it without immediately restarting the system. The reboot associated with the kernel update can then be scheduled for a more suitable maintenance window, helping organizations control downtime without leaving a known kernel issue unaddressed. This is particularly useful for servers and other Linux systems that must remain available while their kernel security is maintained.

Canonical provides the client as part of Ubuntu Pro, and it uses a commercial license. It requires Linux with snapd and supports amd64, arm64, and s390x architectures. The current release is v11.1.0, and the software is intended for Linux users who need to coordinate kernel security updates with operational availability.