gcp Google Cloud release notes · 14h ago

Container Optimized OS Updates Address Linux Kernel Vulnerabilities and Package Upgrades

securitygcpsecurity-advisoryengineer

security patch

Google Cloud has released updates for multiple Container Optimized OS (COS) versions, including `cos-121`, `cos-117`, `cos-129`, and `cos-125`. These updates primarily address numerous security vulnerabilities within the Linux kernel, identified by specific CVEs and KCTF fixes. Additionally, various core packages such as Docker, Containerd, and `google-guest-configs` have been upgraded, along with new support for Lustre client drivers. These changes enhance the security and stability for containerized workloads running on Google Cloud infrastructure.

→cos-121-18867-528-78
→cos-117-18613-675-64
→cos-129-19506-299-161
→cos-125-19216-532-135

Security (40) ›

Container Optimized OS

Fixed CVE-2026-68096 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-68096 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-68096 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-68129 in the linux kernel
Container Optimized OS

Fixed CVE-2026-68146 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-68149 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-68171 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-68299 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-68329 in the Linux kernel.
Container Optimized OS

Fixed KCTF-0650f1c in the Linux Kernel.
Container Optimized OS

Fixed CVE-2026-68096 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-68096 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-68096 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-68116 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-68129 in the linux kernel
Container Optimized OS

Fixed CVE-2026-68146 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-68147 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-68149 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-68171 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-68325 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-68386 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-68428 in the Linux kernel.
Container Optimized OS

Fixed KCTF-0650f1c in the Linux Kernel.
Container Optimized OS

Fixed CVE-2026-68096 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-68096 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-68096 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-68129 in the linux kernel
Container Optimized OS

Fixed CVE-2026-68146 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-68325 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-68338 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-68422 in the Linux kernel.
Container Optimized OS

Fixed KCTF-0650f1c in the Linux Kernel.
Container Optimized OS

Fixed CVE-2026-68093 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-68096 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-68096 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-68096 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-68129 in the linux kernel
Container Optimized OS

Fixed CVE-2026-68296 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-68386 in the Linux kernel.
Container Optimized OS

Fixed KCTF-0650f1c in the Linux Kernel.

Enhancements (7) ›

Container Optimized OS cos-121-18867-528-78

Kernel Docker Containerd GPU Drivers COS-6.6.143 v27.5.1 v2.0.10 See List

GPU Drivers COS-6.6.143 See List
Container Optimized OS cos-117-18613-675-64

Kernel Docker Containerd GPU Drivers COS-6.6.143 v24.0.9 v1.7.34 See List

GPU Drivers COS-6.6.143 See List
Container Optimized OS cos-129-19506-299-161

Kernel Docker Containerd GPU Drivers COS-6.12.94 v27.5.1 v2.2.6 See List

GPU Drivers COS-6.12.94 See List
Container Optimized OS

Updated cos-gpu-installer to v2.7.7.
Container Optimized OS cos-125-19216-532-135

Kernel Docker Containerd GPU Drivers COS-6.12.94 v27.5.1 v2.2.7 See List

GPU Drivers COS-6.12.94 See List
Container Optimized OS

Updated cos-gpu-installer to v2.7.7.
Container Optimized OS

Runtime sysctl changes: Changed: net.ipv4.udp_mem: 188034 250715 376068 -> 188034 250714 376068

Fixes (17) ›

Container Optimized OS

Added support for net-fs/lustre-client-drivers v2.14.0_p259.
Container Optimized OS

Upgraded app-admin/google-guest-configs to v20260804.00.
Container Optimized OS

Upgraded app-arch/zstd to v1.5.7-r1.
Container Optimized OS

Upgraded app-shells/dash to v0.5.13.5.
Container Optimized OS

Upgraded dev-libs/expat to v2.8.3.
Container Optimized OS

Upgraded dev-libs/libverto to v0.3.2-r1.
Container Optimized OS

Upgraded dev-libs/popt to v1.19-r1.
Container Optimized OS

Upgraded dev-libs/xxhash to v0.8.3-r2.
Container Optimized OS

Upgraded sys-apps/acl to v2.4.0-r2.
Container Optimized OS

Upgraded sys-apps/xemu to v0.0.10.
Container Optimized OS

Upgraded sys-process/lsof to v4.99.7.
Container Optimized OS

Added support for net-fs/lustre-client-drivers v2.14.0_p259.
Container Optimized OS

Upgraded sys-apps/xemu to v0.0.10.
Container Optimized OS

Added support for net-fs/lustre-client-drivers v2.14.0_p259.
Container Optimized OS

Upgraded sys-apps/xemu to v0.0.10.
Container Optimized OS

Added support for net-fs/lustre-client-drivers v2.14.0_p259.
Container Optimized OS

Upgraded sys-apps/xemu to v0.0.10.

Read the original announcement →

https://docs.cloud.google.com/release-notes#August_24_2026

Related releases

Bringing gVisor Sandboxes to Distributed Ray Clusters on Google Cloud Google Cloud Blog · 16m ago
Introducing Gemini Enterprise for Financial Services Google Cloud Blog · 4h ago
Google Cloud Introduces Gemini Enterprise for Legal AI Solution Google Cloud Blog · 4h ago
Anthos Config Management gets security updates and monitoring controls Google Cloud release notes · 4h ago
Google SecOps SIEM Adds Unroll Processor for Data Processing Pipelines Google Cloud release notes · 13h ago
Cloud Storage Rapid Cache adds prefix-level ingest-on-write filtering Google Cloud release notes · 14h ago