ReleaseBytes
gcp Google Cloud release notes ·

Container Optimized OS Updates: Kernel, Docker, and Security Fixes

securityinfragcpsecurity-advisoryengineer
security patch

This release of Container Optimized OS includes updates to the Linux kernel, Docker, and Containerd, alongside numerous package upgrades and critical security vulnerability fixes. These updates are crucial for maintaining system security and stability, affecting all users of the OS. Notably, multiple CVEs are addressed, enhancing the overall security posture of the system.

  • →cos-125-19216-532-3
  • →cos-129-19506-299-3
  • →cos-121-18867-528-3
  • →cos-117-18613-675-2
Security (138) ›
  • Container Optimized OS

    Fixed CVE-2026-35388 in net-misc/openssh.

  • Container Optimized OS

    Fixed CVE-2026-40226 in sys-apps/systemd.

  • Container Optimized OS

    Fixed CVE-2026-52921 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52927 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52930 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52942 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53033 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53122 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53131 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53134 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53154 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53156 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53168 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53180 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53181 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53184 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53185 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53189 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53191 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53199 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53207 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53212 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53214 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53218 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53219 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53220 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53223 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53229 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53230 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53232 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53233 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53236 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53239 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53249 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53264 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53265 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53266 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53267 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53268 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53269 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53270 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53275 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-35388 in net-misc/openssh.

  • Container Optimized OS

    Fixed CVE-2026-40226 in sys-apps/systemd.

  • Container Optimized OS

    Fixed CVE-2026-53122 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53131 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53134 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53154 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53156 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53168 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53180 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53181 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53184 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53185 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53189 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53191 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53199 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53212 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53214 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53218 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53219 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53220 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53223 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53229 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53230 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53232 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53235 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53236 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53239 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53249 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53261 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53264 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53265 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53266 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53267 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53268 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53269 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53270 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53275 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-31419 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-35388 in net-misc/openssh.

  • Container Optimized OS

    Fixed CVE-2026-40226 in sys-apps/systemd.

  • Container Optimized OS

    Fixed CVE-2026-52936 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53033 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53131 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53134 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53154 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53168 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53181 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53184 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53185 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53189 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53199 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53212 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53218 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53219 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53223 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53230 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53232 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53236 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53239 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53249 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53264 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53266 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53267 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53268 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53269 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53270 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53275 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-35388 in net-misc/openssh.

  • Container Optimized OS

    Fixed CVE-2026-40226 in sys-apps/systemd.

  • Container Optimized OS

    Fixed CVE-2026-52930 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53033 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53131 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53134 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53154 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53168 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53181 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53184 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53185 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53189 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53199 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53212 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53218 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53219 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53223 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53230 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53232 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53236 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53249 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53264 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53265 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53266 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53267 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53268 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53269 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53270 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53275 in the Linux kernel.

Enhancements (10) ›
  • Container Optimized OS cos-125-19216-532-3

    Kernel Docker Containerd GPU Drivers COS-6.12.94 v27.5.1 v2.1.7 See List

    GPU DriversCOS-6.12.94See List
  • Container Optimized OS cos-129-19506-299-3

    Kernel Docker Containerd GPU Drivers COS-6.12.94 v27.5.1 v2.2.3 See List

    GPU DriversCOS-6.12.94See List
  • Container Optimized OS

    Updated the Linux kernel to v6.12.94. It resolves CVE-2026-52908,CVE-2026-52910, CVE-2026-52912,CVE-2026-52920, CVE-2026-52921,CVE-2026-52923, CVE-2026-52925,CVE-2026-52927,CVE-2026-52928,CVE-2026-52930, CVE-2026-52933,CVE-2026-52936, CVE-2026-52942,CVE-2026-52943, CVE-2026-52946,CVE-2026-52967, CVE-2026-52969,CVE-2026-52970, CVE-2026-52972,CVE-2026-52974, CVE-2026-52977,CVE-2026-52980, CVE-2026-52981,CVE-2026-52984, CVE-2026-52986,CVE-2026-52989, CVE-2026-52990,CVE-2026-52998, CVE-2026-52999,CVE-2026-53001, CVE-2026-53002,CVE-2026-53003, CVE-2026-53006,CVE-2026-53012, CVE-2026-53013,CVE-2026-

  • Container Optimized OS

    Updated the Linux kernel to v6.12.94. It resolves CVE-2026-52908,CVE-2026-52910, CVE-2026-52912,CVE-2026-52920, CVE-2026-52921,CVE-2026-52923, CVE-2026-52925,CVE-2026-52927, CVE-2026-52928,CVE-2026-52930, CVE-2026-52933,CVE-2026-52936, CVE-2026-52942,CVE-2026-52943, CVE-2026-52945,CVE-2026-52946, CVE-2026-52967,CVE-2026-52969, CVE-2026-52970,CVE-2026-52972, CVE-2026-52974,CVE-2026-52977, CVE-2026-52980,CVE-2026-52981, CVE-2026-52984,CVE-2026-52986, CVE-2026-52989,CVE-2026-52990, CVE-2026-52998,CVE-2026-52999, CVE-2026-53001,CVE-2026-53002, CVE-2026-53003,CVE-2026-53006, CVE-2026-53012,CVE-2026

  • Container Optimized OS cos-121-18867-528-3

    Kernel Docker Containerd GPU Drivers COS-6.6.143 v27.5.1 v2.0.8 See List

    GPU DriversCOS-6.6.143See List
  • Container Optimized OS

    Upgraded net-misc/rsync to v3.4.4.

  • Container Optimized OS

    Upgraded the Linux kernel to v6.6.143. Is resolves CVE-2026-52908,CVE-2026-52910, CVE-2026-52912,CVE-2026-52920, CVE-2026-52921,CVE-2026-52923, CVE-2026-52925,CVE-2026-52927, CVE-2026-52928,CVE-2026-52930, CVE-2026-52933,CVE-2026-52936, CVE-2026-52942,CVE-2026-52943, CVE-2026-52945,CVE-2026-52946, CVE-2026-52967,CVE-2026-52969, CVE-2026-52970,CVE-2026-52972, CVE-2026-52974,CVE-2026-52975, CVE-2026-52977,CVE-2026-52981, CVE-2026-52984,CVE-2026-52986, CVE-2026-52989,CVE-2026-52998, CVE-2026-52999,CVE-2026-53001, CVE-2026-53002,CVE-2026-53003, CVE-2026-53006,CVE-2026-53012, CVE-2026-53013,CVE-202

  • Container Optimized OS cos-117-18613-675-2

    Kernel Docker Containerd GPU Drivers COS-6.6.143 v24.0.9 v1.7.31 See List

    GPU DriversCOS-6.6.143See List
  • Container Optimized OS

    Upgraded net-misc/rsync to v3.4.4.

  • Container Optimized OS

    Upgraded the Linux kernel to v6.6.143. It resolves CVE-2026-52908,CVE-2026-52910, CVE-2026-52912,CVE-2026-52920, CVE-2026-52921,CVE-2026-52923, CVE-2026-52925,CVE-2026-52927, CVE-2026-52928,CVE-2026-52930, CVE-2026-52933,CVE-2026-52936, CVE-2026-52942,CVE-2026-52943, CVE-2026-52945,CVE-2026-52946, CVE-2026-52967,CVE-2026-52969, CVE-2026-52970,CVE-2026-52972, CVE-2026-52974,CVE-2026-52975, CVE-2026-52977,CVE-2026-52981, CVE-2026-52984,CVE-2026-52986, CVE-2026-52989,CVE-2026-52998, CVE-2026-52999,CVE-2026-53001, CVE-2026-53002,CVE-2026-53003, CVE-2026-53006,CVE-2026-53012, CVE-2026-53013,CVE-202

Fixes (19) ›
  • Container Optimized OS

    Upgraded app-admin/oslogin to v20260626.00.

  • Container Optimized OS

    Upgraded app-containers/docker-credential-helpers to v0.9.8.

  • Container Optimized OS

    Upgraded dev-db/sqlite to v3.53.3.

  • Container Optimized OS

    Upgraded dev-libs/expat to v2.8.2.

  • Container Optimized OS

    Upgraded net-misc/socat to v1.8.1.3.

  • Container Optimized OS

    Upgraded app-admin/oslogin to v20260626.00.

  • Container Optimized OS

    Upgraded dev-db/sqlite to v3.53.3.

  • Container Optimized OS

    Upgraded dev-libs/expat to v2.8.2.

  • Container Optimized OS

    Upgraded net-misc/socat to v1.8.1.3.

  • Container Optimized OS

    Upgraded sys-apps/acl to v2.4.0.

  • Container Optimized OS

    Upgraded app-containers/docker-credential-helpers to v0.9.8.

  • Container Optimized OS

    Upgraded dev-db/sqlite to v3.53.3.

  • Container Optimized OS

    Upgraded dev-libs/expat to v2.8.2.

  • Container Optimized OS

    Upgraded net-libs/libtirpc to v1.3.7-r2.

  • Container Optimized OS

    Upgraded net-misc/socat to v1.8.1.3.

  • Container Optimized OS

    Upgraded sys-apps/acl to v2.4.0.

  • Container Optimized OS

    Upgraded app-shells/dash to v0.5.13.4-r2.

  • Container Optimized OS

    Upgraded net-fs/cifs-utils to v7.6, Upgraded sys-libs/talloc to v2.4.4-r1.

  • Container Optimized OS

    Upgraded net-misc/socat to v1.8.1.3.

Read the original announcement →

https://docs.cloud.google.com/release-notes#July_06_2026