gcp Google Cloud release notes ·

Google Cloud's Container Optimized OS Updates Kernel, Runtimes, and Fixes Vulnerabilities

securityinfragcppreviewsecurity-advisoryengineer
security feature patch

Google Cloud has released updates for multiple versions of its Container Optimized OS (COS), enhancing the underlying infrastructure for containerized workloads. These updates include new Linux kernel versions, updated Docker and Containerd runtimes, and refreshed GPU drivers across various COS channels. Additionally, the releases incorporate a significant number of security fixes for critical Linux kernel vulnerabilities and enable the CONFIG_UDMABUF feature on x86_64 architectures. These changes improve system stability, performance, and overall security for users running containers on COS.

  • cos-beta-133-19999-0-46
  • cos-129-19506-299-137
  • cos-125-19216-532-108
  • cos-121-18867-528-65
  • cos-117-18613-675-56
Security (122)
  • Container Optimized OS

    Fixed CVE-2026-68081 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64561 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64562 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64567 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64572 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64576 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64579 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64590 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64593 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64597 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64598 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64604 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68092 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68093 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68116 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68119 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68136 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68139 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68142 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68145 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68147 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68149 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68171 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68184 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68186 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68187 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68296 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68299 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68329 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68336 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68343 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68386 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68388 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68396 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68425 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68428 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68432 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68442 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68450 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64380 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64561 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64562 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64567 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64572 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64576 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64579 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64580 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64590 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64593 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64597 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64598 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64604 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68092 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68119 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68136 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68142 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68145 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68146 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68147 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68149 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68184 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68186 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68187 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68284 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68338 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68388 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68396 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68398 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68422 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68425 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68428 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68432 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68442 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68450 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64561 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64562 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64572 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64576 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64579 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64580 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64597 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64598 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64604 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68093 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68116 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68147 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68184 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68186 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68187 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68284 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68325 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68336 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68338 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68343 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68386 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68398 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68425 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68428 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64227 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64476 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64561 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64562 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64572 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64576 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64579 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64580 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64597 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64598 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-64604 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68093 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68184 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68186 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68187 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68284 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68299 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68329 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68336 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68338 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68343 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68388 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68398 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-68425 in the Linux kernel.

Features (3)
  • Container Optimized OS

    Enabled CONFIG_UDMABUF on x86_64.

  • Container Optimized OS

    Enabled CONFIG_UDMABUF on x86_64.

  • Container Optimized OS

    Enabled CONFIG_UDMABUF on x86_64.

Enhancements (6)
  • Container Optimized OS cos-beta-133-19999-0-46

    Kernel Docker Containerd GPU Drivers COS-6.18.39 v29.4.3 v2.3.2 See List

  • Container Optimized OS cos-129-19506-299-137

    Kernel Docker Containerd GPU Drivers COS-6.12.94 v27.5.1 v2.2.6 See List

  • Container Optimized OS

    Runtime sysctl changes: Changed: net.ipv4.udp_mem: 188034 250715 376068 -> 188034 250714 376068

  • Container Optimized OS cos-125-19216-532-108

    Kernel Docker Containerd GPU Drivers COS-6.12.94 v27.5.1 v2.1.9 See List

  • Container Optimized OS cos-121-18867-528-65

    Kernel Docker Containerd GPU Drivers COS-6.6.143 v27.5.1 v2.0.10 See List

  • Container Optimized OS cos-117-18613-675-56

    Kernel Docker Containerd GPU Drivers COS-6.6.143 v24.0.9 v1.7.34 See List

Read the original announcement →

https://docs.cloud.google.com/release-notes#August_17_2026

Related releases