gcp Google Cloud release notes · 1d ago

GCP Container Optimized OS Updates Address Numerous CVEs and Improve Performance

securitygcppreviewsecurity-advisoryengineer

security feature patch

Google Cloud has released updates for several versions of its Container Optimized OS (COS), encompassing cos-beta-133, cos-129, cos-125, cos-117, and cos-121. These updates primarily deliver extensive security fixes, patching numerous CVEs found in the Linux kernel and various system components like coreutils and wget. Additionally, the releases include a performance improvement for the GVE driver on multi-NUMA systems and upgrades to key network libraries. These enhancements collectively bolster the security, stability, and performance of containerized workloads running on Google Cloud Platform.

→cos-beta-133-19999-44-44
→cos-129-19506-448-36
→cos-125-19216-655-28
→cos-117-18613-731-21
→cos-121-18867-584-23

Security (85) ›

Container Optimized OS

Fixed CVE-2026-56391 in sys-apps/coreutils.
Container Optimized OS

Fixed CVE-2026-58470 in net-misc/wget.
Container Optimized OS

Fixed CVE-2026-80590 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-59890 in dev-python/setuptools.
Container Optimized OS

Fixed CVE-2026-80737 in the Linux kernel.
Container Optimized OS

Upgraded net-libs/nghttp2 to 1.69.0 and fixed CVE-2026-58055.
Container Optimized OS

Fixed CVE-2026-80788 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80789 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80791 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80792 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80793 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80805 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80806 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80808 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80837 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80838 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80839 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80842 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80843 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80845 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80852 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80854 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80855 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80856 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80862 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80916 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80917 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80590 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80737 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80788 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80789 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80791 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80792 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80793 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80805 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80806 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80808 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80837 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80838 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80839 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80842 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80843 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80845 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80852 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80854 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80855 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80856 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80862 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80916 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80917 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80590 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80737 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80788 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80789 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80791 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80792 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80793 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80805 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80806 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80808 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80842 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80843 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80852 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80854 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80855 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80856 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80916 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80917 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80590 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80737 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80788 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80789 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80791 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80792 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80793 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80805 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80806 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80808 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80842 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80843 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80852 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80854 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80855 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80856 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-80917 in the Linux kernel.

Features (1) ›

Container Optimized OS

Fixed a performance issue in the GVE driver on multi-NUMA systems.

Enhancements (7) ›

Container Optimized OS cos-beta-133-19999-44-44

Kernel Docker Containerd GPU Drivers COS-6.18.48 v29.4.3 v2.3.4 See List

GPU Drivers COS-6.18.48 See List
Container Optimized OS cos-129-19506-448-36

Kernel Docker Containerd GPU Drivers COS-6.12.105 v27.5.1 v2.2.7 See List

GPU Drivers COS-6.12.105 See List
Container Optimized OS

Fixed CVE-2026-56391 in sys-apps/coreutils.
Container Optimized OS cos-125-19216-655-28

Kernel Docker Containerd GPU Drivers COS-6.12.105 v27.5.1 v2.2.7 See List

GPU Drivers COS-6.12.105 See List
Container Optimized OS

Runtime sysctl changes: Changed: net.ipv4.udp_mem: 188034 250714 376068 -> 188034 250715 376068
Container Optimized OS cos-117-18613-731-21

Kernel Docker Containerd GPU Drivers COS-6.6.153 v24.0.9 v1.7.34 See List

GPU Drivers COS-6.6.153 See List
Container Optimized OS cos-121-18867-584-23

Kernel Docker Containerd GPU Drivers COS-6.6.153 v27.5.1 v2.0.10 See List

GPU Drivers COS-6.6.153 See List

Fixes (1) ›

Container Optimized OS

Upgraded net-libs/libnftnl to v1.2.9.

Read the original announcement →

https://docs.cloud.google.com/release-notes#September_17_2026

Related releases

Gemini Enterprise adds new actions for Microsoft 365 data sources Google Cloud release notes · 14h ago
Memorystore for Valkey: Basic Token Authentication Now GA Google Cloud release notes · 14h ago
xAI's Grok 4.6 is Now Generally Available on Gemini Enterprise Agent Platform Google Cloud release notes · 14h ago
Google Cloud Contact Center as a Service addresses numerous bugs and issues Google Cloud release notes · 14h ago
Apigee hybrid v1.16.10 Released with Security Fixes and Kubernetes 1.36 Support Google Cloud release notes · 1d ago
Cloud Scheduler now available in asia-southeast3 (Bangkok) Google Cloud release notes · 14h ago