--- title: 'The missing piece: bringing up to 15 years of support to Zephyr for microcontroller-based ECUs' description: We recently announced the launch of Zephyr 26.04 LTS, bringing up to 15 years of security maintenance per LTS and enterprise lifecycle management to microcontroller-grade devices. While central high-performance computer ECUs capture most of the industry spotlight in software-defined vehicle (SDV) architectures, the operational reality of […] url: https://canonical.com/blog/the-missing-piece-bringing-up-to-15-years-of-support-to-zephyr-for-microcontroller-based-ecus --- 1. [Blog](https://canonical.com/blog) 2. Article --- [Jaume Rafols](https://canonical.com/blog/author/jrafols "More about Jaume Rafols") 6 November 2026 # The missing piece: bringing up to 15 years of support to Zephyr for microcontroller-based ECUs [Automotive](https://canonical.com/blog/tag/automotive) --- Share the article We recently announced the launch of [Zephyr 26.04 LTS](https://canonical.com/blog/zephyr-lts-announcement), bringing up to 15 years of security maintenance per LTS and enterprise lifecycle management to microcontroller-grade devices. While central high-performance computer ECUs capture most of the industry spotlight in software-defined vehicle (SDV) architectures, the operational reality of modern vehicles is far more distributed. Under the chassis sit hundreds of microcontroller-based electronic control units (ECUs) managing real-time sensor loops, power distribution, and domain specific control tasks. These lightweight microcontrollers (MCUs) present a huge cybersecurity vulnerability if left unmanaged over multi-decade vehicle lifecycles. With Zephyr LTS, those same MCUs now receive long-term support, expanding support across the entire software-defined vehicle (SDV) architecture. ## The compliance gap Traditional MCU lifecycle management relies on custom downstream open-source forks or proprietary RTOS distributions. This creates an unsustainable, fragmented engineering burden: **Engineering silos**: In-house teams spend thousands of hours applying security patches to legacy RTOS forks rather than building new product developments. **Supply chain vulnerabilities**: Unpatched microcontrollers can become backdoors into primary vehicle buses like CAN or Ethernet AVB. **Compliance bottlenecks**: Tracking SBOM across dozens of disparate vendor toolchains and SDKs slows regulatory audits and increases liability risks under ISO/SAE 21434. ## Turnkey compliance and enterprise lifecycle support Maintaining cybersecurity across a decade-long vehicle deployment demands a stable, predictable foundation. Zephyr 26.04 LTS addresses technical debt and regulatory mandates through key capabilities: * **Up to 15 years of support** per LTS**:** Canonical provides CVE monitoring, security patching, and SBOM generation for up to 15 years. This removes long-term compliance friction for automotive fleets. * **Predictable release cadence:** Zephyr LTS mirrors Ubuntu’s established release cycle, delivering LTS releases every two years and interim updates every six months to provide dependable roadmap predictability. * **Full stack tooling coverage:** We maintain the core Zephyr’s RTOS kernel alongside essential build tools like *West* (Zephyr’s meta-tool for building, flashing, and managing repositories). ## Development agility with Canonical Workshop Decoupling hardware from software requires frictionless developer tooling and reliable remote deployment mechanisms. To accelerate time-to-market and streamline onboarding across distributed teams, Zephyr LTS integrates Canonical Workshop. Canonical Workshop is an open-source tool developed by Canonical that launches sandboxed, reproducible development environments on Ubuntu using a single command.  Using the Workshop SDK for Zephyr 26.04 LTS, developers can access a ready-to-use Zephyr LTS environment on any hardware, complete with essential build tools. This allows engineering teams to bypass complex local toolchain configurations and execute tools like *West* immediately. Zephyr LTS delivers the deterministic real time performance for your critical tasks, andCanonical manages the long-term security, compliance and patches –enabling your developers to ship features rapidly. ### **Get in touch with our automotive experts** Navigating multi-decade security maintenance and regulatory compliance does not have to slow down your engineering teams. Whether you are architecting next-generation SDVs or looking to secure MCU-class ECUs, our team is here to help. [Contact our automotive team](https://canonical.com/solutions/automotive#get-in-touch) today to discuss your architecture requirements, request a demonstration, or explore how Zephyr LTS fits into your production roadmap. [Get in touch Interested in running Ubuntu in your organization?](https://ubuntu.com/about/contact-us/form) ## Sign up for our newsletter Get the latest Canonical news and updates in your inbox. Work email: \*I agree to receive information about Canonical's products and services. In submitting this form, I confirm that I have read and agree to [Canonical's Privacy Notice](https://canonical.com/legal/data-privacy/contact) and [Privacy Policy](https://canonical.com/legal/data-privacy). Sign up ## Share on --- ## Related posts [### Beyond safety and security: Why automotive open source demands dependability](https://canonical.com/blog/beyond-safety-and-security-why-automotive-open-source-demands-dependability) In the traditional automotive world, teams often work in silos: the cybersecurity experts lock down the ports, the quality assurance teams hunt for bugs, and the functional... [Jaume Rafols](https://canonical.com/blog/author/jrafols) 6 July 2026 [### Cloud-native Android™ infotainment: your CI pipeline shouldn’t depend on hardware](https://canonical.com/blog/cloud-native-android-infotainment-your-ci-pipeline-shouldnt-depend-on-hardware) More and more often, infotainment systems are being developed and delivered like software, yet often they are still tested and validated using hardware-centric processes. This... [Bertrand Boisseau](https://canonical.com/blog/author/bboisseau) 2 March 2026 [### From cloud to dashboard: experience the future of infotainment development at CES 2026](https://canonical.com/blog/future-of-infotainment-canonical-at-ces-2026) This year, we’re excited to show a demo that combines the strengths of both Anbox Cloud and Rightware’s Kanzi, the industry-leading software for creating rich, visually... [Bertrand Boisseau](https://canonical.com/blog/author/bboisseau) 5 December 2025 [### Using ISO/SAE 21434 to stay ahead of the Cyber Resilience Act](https://canonical.com/blog/using-iso-sae-21434-to-stay-ahead-of-the-cyber-resilience-act) How ISO/SAE 21434 helps you get ready for the Cyber Resilience Act If you work in automotive, you’ve probably already heard of the CRA – the EU’s Cyber Resilience Act. It’s one... [Bertrand Boisseau](https://canonical.com/blog/author/bboisseau) 3 September 2025