Hello,
We are developing a product based on the nRF52840. According to the blog post nRF Connect SDK gets Long-term support with version 3.4.0, NCS v3.4.0 declares the nRF52 Series feature complete, and the LTS branch will receive bug and security fixes for 5 years, i.e. until approximately mid-2031.
Under the EU Cyber Resilience Act, we must provide security updates for a support period that reflects the expected use time of our product (at least 5 years from placing on the market). For our product, this support period will extend well beyond 2031.
- Can you confirm the end date of the v3.4 LTS support period? Are there plans to include the nRF52840 in a future LTS release (e.g. the one aligned with Zephyr 4.6 LTS), or otherwise to extend security support for the nRF52 Series beyond 2031?
- In later NCS releases, will the nRF52840 still build and be usable (without official support), or will support be removed from drivers, the SoftDevice Controller and MPSL as well?
- If vulnerabilities (CVEs) are found after the LTS period, e.g. in the SoftDevice Controller, the Bluetooth host or the crypto libraries, will fixes be published in a way that can be applied to nRF52840 projects?
- Does Nordic still recommend the nRF52840 for new designs going into production from 2027 onwards, or is the nRF54LM20A the recommended migration path?
Thank you and best regards,
Luzian