Ubuntu 22.04 LTS must be a vendor-supported release.

STIG ID: UBTU-22-211000  |  SRG: SRG-OS-000480-GPOS-00227 |  Severity: high (CAT I)  |  CCI: CCI-000366 |  Vulnerability Id: V-278951

Vulnerability Discussion

An operating system release is considered "supported" if the vendor continues to provide security patches for the product. With an unsupported release, it will not be possible to resolve security issues discovered in the system software.

The support status of the OS depends on its subscription status.

End of life dates for Ubuntu 22.04 releases are as follows:
Standard Support: April 2027
Extended Security Maintenance (ESM): April 2032

ESM is available via an Ubuntu Pro subscription.

Check

Verify the version of Ubuntu 22.04 LTS is vendor supported with the following command:

$ grep DISTRIB_DESCRIPTION /etc/lsb-release
DISTRIB_DESCRIPTION="Ubuntu 22.04.1 LTS"

Check the subscription status of the system with the following command:
$ pro status

If the installed version of Ubuntu 22.04 LTS is not supported, this is a finding.

Fix

Upgrade to a supported version of Ubuntu 22.04 LTS.
This website is not created by, run, approved, or endorsed by the U.S. Department of Defense. Use at your own risk. This website is created by open-source software.