gcp Google Cloud release notes ·

Container Optimized OS Updates Address Security and Memory Errors

securitygcpsecurity-advisoryengineer
security feature patch

This update to Container Optimized OS includes several security fixes for CVEs in systemd and the Linux kernel, alongside a feature that enhances memory error handling for CUDA workloads on ARM64. It also contains patches for Docker and GPU drivers. Users running CUDA on ARM64 may see improved stability, and all users benefit from the security remediations.

  • cos-129-19506-299-20
  • cos-125-19216-532-14
  • cos-117-18613-675-11
  • cos-121-18867-528-10
Security (12)
  • Container Optimized OS

    Fixed CVE-2026-40225 in sys-apps/systemd.

  • Container Optimized OS

    Fixed CVE-2026-43010 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53167 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53341 in the Linux kernel.

  • Container Optimized OS

    Fixed KCTF-736b380 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53341 in the Linux kernel.

  • Container Optimized OS

    Fixed KCTF-736b380 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-40225 in sys-apps/systemd.

  • Container Optimized OS

    Fixed CVE-2026-53362 in the Linux kernel.

  • Container Optimized OS

    Fixed KCTF-7cb9a23 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-40225 in sys-apps/systemd.

  • Container Optimized OS

    Fixed CVE-2026-53362 in the Linux kernel.

Features (2)
  • Container Optimized OS

    Enabled CONFIG_MEMORY_FAILURE in the Linux kernel for ARM64. This should improve memory errors handling when running CUDA workloads.

  • Container Optimized OS

    Enabled CONFIG_MEMORY_FAILURE in the Linux kernel for ARM64. This should improve memory errors handling when running CUDA workloads.

Enhancements (4)
Fixes (4)
  • Container Optimized OS

    Changed google-guest-agent's plugin installation path to /var/lib/google/guest-agent.

  • Container Optimized OS

    Upgraded app-admin/fluent-bit to v4.2.6.

  • Container Optimized OS

    Upgraded app-containers/docker-credential-helpers to v0.9.8.

  • Container Optimized OS

    Changed google-guest-agent's plugin installation path to /var/lib/google/guest-agent.

Read the original announcement →

https://docs.cloud.google.com/release-notes#July_13_2026

Related releases