Ubuntu 9.x — End of Life
EOL Actively exploitedUbuntu 9.x reached end of life on Apr 30, 2011, 5655 days ago, and no longer receives security fixes. The most recent release in this series is 9.10. 2 CVEs are tracked for this series, including 1 critical and 1 actively exploited according to CISA KEV. 1 of them was published after the end of life of the affected cycle and will not get an official patch. The next major version is Ubuntu 10. See Ubuntu 10 →
Ubuntu 9.x — All releases
| Version | Released | Active support | EOL date | Latest patch | Status | Alert me |
|---|---|---|---|---|---|---|
| 9.10 | Oct 29, 2009 | Apr 30, 2011 | Apr 30, 2011 | 9.10 | EOL | |
| 9.04 | Apr 23, 2009 | Oct 23, 2010 | Oct 23, 2010 | 9.04 | EOL |
CVEs affecting Ubuntu 9.x (4)
| CVE | Severity | CVSS | EPSS | KEV | Cycle | Description | Published |
|---|---|---|---|---|---|---|---|
| CVE-2026-31431 | HIGH | 7.8 | 3.43% | KEV | 9.10 | In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-pla… | Apr 22, 2026 |
| CVE-2026-31431 | HIGH | 7.8 | 3.43% | KEV | 9.04 | In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-pla… | Apr 22, 2026 |
| CVE-2009-3555 | CRITICAL | 9.8 | 87.26% | — | 9.10 | The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS… | Nov 9, 2009 |
| CVE-2009-3555 | CRITICAL | 9.8 | 87.26% | — | 9.04 | The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS… | Nov 9, 2009 |
Ubuntu 9.x is EOL — migrate to Ubuntu 10.x
Ubuntu 10.x is the next major release. Plan your upgrade before Ubuntu 9.x stops receiving security patches.
Add a Ubuntu 9 EOL badge to your README
Show your users which Ubuntu version your project runs and whether it is still supported. The badge updates automatically. More formats and options →
[](https://eolcanary.com/explore/ubuntu/9)Frequently asked questions
Is Ubuntu 9 end of life?
Yes. All Ubuntu 9.x releases have reached end of life and no longer receive security patches. There are 2 known CVEs affecting Ubuntu 9.x, including 1 critical. Migrate to Ubuntu 10.x as soon as possible.
What CVEs affect Ubuntu 9?
There are 2 CVEs tracked for Ubuntu 9.x, including 1 critical severity issue and 1 listed in the CISA Known Exploited Vulnerabilities catalog. See the full list above with CVSS and EPSS scores.
What is the latest Ubuntu 9 version?
The latest Ubuntu 9.x patch release is 9.10, released on October 29, 2009. Always run the latest patch to benefit from all security fixes.
How to migrate from Ubuntu 9 to Ubuntu 10?
To migrate from Ubuntu 9 to Ubuntu 10: (1) review the official Ubuntu 10 migration guide for breaking changes, (2) update dependencies and configuration accordingly, (3) test thoroughly in a staging environment, (4) deploy with a rollback plan. Starting early gives you time to resolve compatibility issues before your current version reaches end of life.
Is it safe to run Ubuntu 9 in production?
No. Ubuntu 9 has reached end of life and security vulnerabilities are no longer patched. Critically, 1 CVE affecting Ubuntu 9.x is in the CISA KEV catalog — meaning it is actively exploited in the wild. Upgrade to a supported version immediately.
Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA