Ubuntu Prepares New linux-firmware-hwe Package to Mitigate Kernel Update Risks

Ubuntu is planning the introduction of a new linux-firmware-hwe package in an ongoing effort to reduce the risk of firmware updates tied to newer kernels causing stability problems for users running older kernel iterations. The change aims to decouple the firmware ecosystems of standard and hardware enablement kernels, addressing a long-standing architectural bottleneck that has occasionally affected system stability across long-term support deployments.

On Ubuntu long-term support releases, system administrators and everyday users face a fundamental choice regarding kernel management. Users can stick with the standard General Availability (GA) kernel that the operating system was originally released with for the entire duration of its support period, ensuring maximum baseline stability. Alternatively, users have the option to install the Hardware Enablement (HWE) update, which systematically brings newer Linux kernel versions to existing Ubuntu LTS releases to better support modern hardware components.

Up until now, both of these distinct kernel tracks have shared the exact same underlying firmware package. While this unified approach historically simplified package management for Canonical’s engineering teams, it created a structural vulnerability: firmware updates that are specifically designed, tested, and optimized to work harmoniously with newer HWE kernels can inadvertently cause regressions, hardware conflicts, or outright system problems for users who choose to stick with the older GA kernel.

The practical implications of this shared dependency were recently highlighted by Ubuntu developer Juerg Haefliger. A firmware backport intended for the Ubuntu 24.04 LTS release, which was specifically engineered to support its Linux 7.0 HWE kernel, inadvertently introduced two significant AMD-related regressions for users who were running the Linux 6.9 GA kernel. Incidents of this nature underscore the reality that hardware initialization code and microcode updates cannot always effortlessly bridge the gap between different kernel generations without unintended side effects.

Consequently, Canonical recognized that a new approach is urgently needed to prevent stability regressions on stable production systems. The plan, which was laid out by Haefliger on Ubuntu developer communication channels, involves configuring HWE kernels to rely on a dedicated linux-firmware-hwe package. This new package will dynamically pull in specialized HWE versions of existing firmware subpackages. This architecture builds directly upon Ubuntu’s broader packaging overhaul, which saw firmware packages split into granular subpackages for the 24.04 release cycle.

By implementing this architectural separation, the change will allow users who deliberately stick with the standard GA kernel to continue using the tried-and-tested standard firmware set. Crucially, these users will no longer receive automatic firmware updates that were fundamentally intended for newer HWE kernels, shielding them from unexpected hardware regressions.

Despite this split in the packaging pipeline, both firmware sets will continue to receive targeted fixes and security patches for reported issues from Canonical for the duration of their respective support periods. This ensures that safety and stability are maintained across both kernel tracks without forcing users to choose between outdated microcode and cutting-edge kernel improvements.

However, this transition introduces a complex logistical challenge for system architects. Most users running Ubuntu LTS releases will, at some point during the lifecycle of their devices, have both a GA and an HWE kernel installed on the same machine simultaneously. Because traditional package management constraints dictate that only one primary firmware package can be installed at any given moment, systems maintaining both kernels will inevitably require a workaround of some sort to resolve potential file conflicts or dependency blockages.

Despite these hurdles, the architectural shift is now moving forward. Development and packaging work is actively underway, with firmware packages in Ubuntu 26.10 currently being prepared as dedicated HWE versions in anticipation of their upcoming backport to Ubuntu 26.04 scheduled for early 2027.