gcp Google Cloud release notes · 15h ago

Google Cloud's Container Optimized OS Receives Updates with New Features and Critical Security Fixes

securitygcppreviewsecurity-advisoryengineer

security feature patch

Google Cloud has rolled out a comprehensive update for its Container Optimized OS (COS) across multiple release channels, including beta, dev, and stable versions. These updates introduce support for installing Vast 4.5.8 NFS client drivers and include kernel patches to prevent I/O stalls, enhancing performance and functionality. Crucially, the release addresses numerous security vulnerabilities, incorporating fixes for multiple CVEs in the Linux kernel and google-guest-agent, as well as KCTF issues and updates to critical components like `nghttp2` and `node-problem-detector`. These improvements ensure greater stability, security, and expanded capabilities for containerized workloads running on COS.

→cos-beta-133-19999-0-28
→cos-129-19506-299-116
→cos-dev-138-20035-0-0
→cos-121-18867-528-58
→cos-117-18613-675-48

Security (48) ›

Container Optimized OS

Fixed CVE-2026-64227 in the Linux kernel.
Container Optimized OS

Fixed KCTF-8173f7e in the Linux Kernel.
Container Optimized OS

Fixed CVE-2026-64279 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64286 in the Linux kernel.
Container Optimized OS

Fixed KCTF-8173f7e in the Linux Kernel.
Container Optimized OS

Fixed CVE-2026-64287 in the Linux kernel.
Container Optimized OS

Upgraded net-libs/nghttp2 to 1.69.0 and fixed CVE-2026-58055.
Container Optimized OS

Fixed CVE-2026-64352 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64375 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64401 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64413 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64416 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64476 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64508 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64530 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64532 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64533 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64534 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64535 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64538 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64542 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64545 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64546 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64548 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64552 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64554 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64555 in the Linux kernel.
Container Optimized OS

Fixed KCTF-8173f7e in the Linux Kernel.
Container Optimized OS

Fixed CVE-2026-64279 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64319 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64352 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64375 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64401 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64413 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64474 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64476 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64535 in the Linux kernel.
Container Optimized OS

Fixed KCTF-8173f7e in the Linux Kernel.
Container Optimized OS

Fixed CVE-2026-64279 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64319 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64352 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64375 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64401 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64413 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64535 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64548 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64556 in the Linux kernel.
Container Optimized OS

Fixed KCTF-8173f7e in the Linux Kernel.

Features (2) ›

Container Optimized OS

Added support for installing the Vast 4.5.8 NFS client drivers with cos-dkms.
Container Optimized OS

Added support for installing the Vast 4.5.8 NFS client drivers with cos-dkms.

Enhancements (6) ›

Container Optimized OS cos-beta-133-19999-0-28

Kernel Docker Containerd GPU Drivers COS-6.18.39 v29.4.3 v2.3.2 See List

GPU Drivers COS-6.18.39 See List
Container Optimized OS cos-129-19506-299-116

Kernel Docker Containerd GPU Drivers COS-6.12.94 v27.5.1 v2.2.6 See List

GPU Drivers COS-6.12.94 See List
Container Optimized OS cos-dev-138-20035-0-0

Kernel Docker Containerd GPU Drivers COS-6.18.41 v29.4.3 v2.3.2 See List

GPU Drivers COS-6.18.41 See List
Container Optimized OS

Runtime sysctl changes: Changed: net.ipv4.udp_mem: 188034 250714 376068 -> 188034 250715 376068
Container Optimized OS cos-121-18867-528-58

Kernel Docker Containerd GPU Drivers COS-6.6.143 v27.5.1 v2.0.10 See List

GPU Drivers COS-6.6.143 See List
Container Optimized OS cos-117-18613-675-48

Kernel Docker Containerd GPU Drivers COS-6.6.143 v24.0.9 v1.7.34 See List

GPU Drivers COS-6.6.143 See List

Fixes (9) ›

Container Optimized OS

Added kernel patch to reduce bcache garbage collection sleep interval to prevent I/O stalls.
Container Optimized OS

Added kernel patch to reduce bcache garbage collection sleep interval to prevent I/O stalls.
Container Optimized OS

Fixed CVE-2026-33186 in google-guest-agent.
Container Optimized OS

Added kernel patch to reduce bcache garbage collection sleep interval to prevent I/O stalls.
Container Optimized OS

Mask nfttables-restore.service to address time to ssh regression.
Container Optimized OS

Mask nfttables-restore.service to address time to ssh regression.
Container Optimized OS

Updated app-admin/node-problem-detector to v0.8.25.
Container Optimized OS

Update dev-lang/go to 1.25.12.
Container Optimized OS

Update dev-lang/go to 1.25.12.

Read the original announcement →

https://docs.cloud.google.com/release-notes#August_11_2026

Related releases

Google SecOps: Scheduled SOAR Database Maintenance Google Cloud release notes · 1h ago
VPC Service Controls Recommender Enters Public Preview Google Cloud release notes · 1h ago
Data Studio Adds Chart and Component Customization Features Google Cloud release notes · 2h ago
Google SecOps Marketplace Updates Integrations and Fixes Google Cloud release notes · 2h ago
Access Approval Feature App Topology with One Graph Now Generally Available Google Cloud release notes · 2h ago
Google SecOps SOAR Schedules Database and Infrastructure Maintenance Google Cloud release notes · 2h ago