Google Container-Optimized OS Updates Address Multiple Linux Kernel Vulnerabilities
Google has released updates for Container-Optimized OS (COS) versions cos-125-19216-532-121 and cos-129-19506-299-148. These updates primarily fix several critical security vulnerabilities, identified by specific CVEs, within the Linux kernel. The patches enhance the security posture for containerized workloads running on Google Cloud by mitigating potential exploits. Additionally, the releases include an update to the `cos-gpu-installer` and a minor adjustment to `net.ipv4.udp_mem` sysctl parameters.
- →cos-125-19216-532-121
- →cos-129-19506-299-148
Security (8) ›
- Container Optimized OS
Fixed CVE-2026-68116 in the Linux kernel.
- Container Optimized OS
Fixed CVE-2026-68139 in the Linux kernel.
- Container Optimized OS
Fixed CVE-2026-68171 in the Linux kernel.
- Container Optimized OS
Fixed CVE-2026-68325 in the Linux kernel.
- Container Optimized OS
Fixed CVE-2026-68336 in the Linux kernel.
- Container Optimized OS
Fixed CVE-2026-68343 in the Linux kernel.
- Container Optimized OS
Fixed CVE-2026-68284 in the Linux kernel.
- Container Optimized OS
Fixed CVE-2026-68398 in the Linux kernel.
Enhancements (3) ›
- Container Optimized OS cos-125-19216-532-121
Kernel Docker Containerd GPU Drivers COS-6.12.94 v27.5.1 v2.1.9 See List
- Container Optimized OS cos-129-19506-299-148
Kernel Docker Containerd GPU Drivers COS-6.12.94 v27.5.1 v2.2.6 See List
- Container Optimized OS
Runtime sysctl changes: Changed: net.ipv4.udp_mem: 188034 250714 376068 -> 188034 250715 376068
Fixes (2) ›
- Container Optimized OS
Updated cos-gpu-installer to v2.7.6.
- Container Optimized OS
Updated cos-gpu-installer to v2.7.6.
https://docs.cloud.google.com/release-notes#August_19_2026
Related releases
- Bringing gVisor Sandboxes to Distributed Ray Clusters on Google Cloud Google Cloud Blog ·
- Introducing Gemini Enterprise for Financial Services Google Cloud Blog ·
- Google Cloud Introduces Gemini Enterprise for Legal AI Solution Google Cloud Blog ·
- Anthos Config Management gets security updates and monitoring controls Google Cloud release notes ·
- Google SecOps SIEM Adds Unroll Processor for Data Processing Pipelines Google Cloud release notes ·
- Container Optimized OS Updates Address Linux Kernel Vulnerabilities and Package Upgrades Google Cloud release notes ·