gcp Google Cloud release notes · 1d ago

Google Container Optimized OS Updates Kernel, Container Runtimes, and Fixes CVEs

securitygcppreviewsecurity-advisoryengineer

security patch

Google has updated multiple versions of its Container Optimized OS, bringing new Linux kernel versions, updated container runtimes, and various security and bug fixes across stable, beta, and dev channels. These releases address critical vulnerabilities like CVE-2026-33186 and CVE-2026-6238 in core components, and update Docker and Containerd to newer versions. Additionally, some versions include support for new NVIDIA GPU drivers, enhancing hardware compatibility for affected workloads and ensuring the security and performance of containerized applications on Google Cloud.

→cos-beta-133-19999-44-28
→cos-129-19506-448-20
→cos-dev-138-20098-0-0
→cos-117-18613-731-6
→cos-121-18867-584-7

Security (8) ›

Container Optimized OS

Update dev-go/net to v0.55.0 to fix CVE-2026-25680.
Container Optimized OS

Updated dev-go/net to v0.55.0 to fix CVE-2026-25680.
Container Optimized OS

Fixed CVE-2026-6238 in sys-libs/glibc.
Container Optimized OS

Updated dev-go/net to v0.55.0 to fix CVE-2026-25680.
Container Optimized OS

Fixed CVE-2026-6238 in sys-libs/glibc.
Container Optimized OS

Updated dev-go/net to v0.55.0 to fix CVE-2026-25680.
Container Optimized OS

Fixed CVE-2026-6238 in sys-libs/glibc.
Container Optimized OS

Updated dev-go/net to v0.55.0 to fix CVE-2026-25680.

Enhancements (11) ›

Container Optimized OS cos-beta-133-19999-44-28

Kernel Docker Containerd GPU Drivers COS-6.18.48 v29.4.3 v2.3.4 See List

GPU Drivers COS-6.18.48 See List
Container Optimized OS cos-129-19506-448-20

Kernel Docker Containerd GPU Drivers COS-6.12.105 v27.5.1 v2.2.7 See List

GPU Drivers COS-6.12.105 See List
Container Optimized OS cos-dev-138-20098-0-0

Kernel Docker Containerd GPU Drivers COS-6.18.49 v29.4.3 v2.3.2 See List

GPU Drivers COS-6.18.49 See List
Container Optimized OS

Updated containerd and containerd-test to v2.3.4.
Container Optimized OS

Updated the Linux kernel to v6.18.48.
Container Optimized OS

Updated the Linux kernel to v6.18.49.
Container Optimized OS

Runtime sysctl changes: Changed: net.ipv4.udp_mem: 188034 250714 376068 -> 188034 250715 376068
Container Optimized OS cos-117-18613-731-6

Kernel Docker Containerd GPU Drivers COS-6.6.153 v24.0.9 v1.7.34 See List

GPU Drivers COS-6.6.153 See List
Container Optimized OS cos-121-18867-584-7

Kernel Docker Containerd GPU Drivers COS-6.6.153 v27.5.1 v2.0.10 See List

GPU Drivers COS-6.6.153 See List
Container Optimized OS cos-125-19216-655-12

Kernel Docker Containerd GPU Drivers COS-6.12.105 v27.5.1 v2.2.7 See List

GPU Drivers COS-6.12.105 See List
Container Optimized OS

Runtime sysctl changes: Changed: net.ipv4.udp_mem: 188034 250715 376068 -> 188034 250714 376068

Fixes (38) ›

Container Optimized OS

Updated the Linux kernel to v6.18.48.
Container Optimized OS

Fixed CVE-2026-33186 in app-containers/docker.
Container Optimized OS

Fixed docker cp failure when copying to/from containers with symlinked bind mounts.
Container Optimized OS

Fixed CVE-2026-33186 in app-admin/extensions-manager.
Container Optimized OS

Updated sys-devel/binutils to v2.40.
Container Optimized OS

Fixed CVE-2026-33186 in app-admin/google-osconfig-agent.
Container Optimized OS

Fixed CVE-2026-33186 in app-admin/node-problem-detector.
Container Optimized OS

Fixed CVE-2026-33186 in app-containers/containerd.
Container Optimized OS

Fixed CVE-2026-33186 in app-emulation/kubernetes.
Container Optimized OS

Upgraded app-containers/docker-credential-helpers to v0.9.9.
Container Optimized OS

Upgraded dev-db/sqlite to v3.53.4.
Container Optimized OS

Upgraded dev-libs/expat to v2.8.4.
Container Optimized OS

Upgraded dev-libs/xxhash to v0.8.3-r2.
Container Optimized OS

Upgraded net-libs/libnftnl to v1.2.9.
Container Optimized OS

Fixed CVE-2026-6238 in sys-libs/glibc.
Container Optimized OS

Fixed docker cp failure when copying to/from containers with symlinked bind mounts.
Container Optimized OS

Upgraded app-admin/google-guest-configs to v20260819.00.
Container Optimized OS

Upgraded app-arch/zstd to v1.5.7-r1.
Container Optimized OS

Upgraded app-containers/docker-credential-helpers to v0.9.9.
Container Optimized OS

Upgraded app-shells/dash to v0.5.13.5.
Container Optimized OS

Upgraded dev-db/sqlite to v3.53.4.
Container Optimized OS

Upgraded dev-libs/expat to v2.8.3.
Container Optimized OS

Upgraded dev-libs/libverto to v0.3.2-r1.
Container Optimized OS

Upgraded dev-libs/popt to v1.19-r1.
Container Optimized OS

Upgraded dev-libs/xxhash to v0.8.3-r2.
Container Optimized OS

Upgraded net-libs/libnftnl to v1.2.9.
Container Optimized OS

Upgraded sys-apps/acl to v2.4.0-r2.
Container Optimized OS

Upgraded sys-auth/passwdqc to v2.0.3-r1.
Container Optimized OS

Upgraded sys-process/lsof to v4.99.7.
Container Optimized OS

Fixed docker cp failure when copying to/from containers with symlinked bind mounts.
Container Optimized OS

Upgraded app-admin/google-guest-configs to v20260819.00.
Container Optimized OS

Upgraded app-containers/docker-credential-helpers to v0.9.9.
Container Optimized OS

Upgraded dev-db/sqlite to v3.53.4.
Container Optimized OS

Upgraded net-libs/libnftnl to v1.2.9.
Container Optimized OS

Upgraded sys-auth/passwdqc to v2.0.3-r1.
Container Optimized OS

Added support for NVIDIA driver v595.91.07.
Container Optimized OS

Fixed docker cp failure when copying to/from containers with symlinked bind mounts.
Container Optimized OS

Upgraded dev-db/sqlite to v3.53.4.

Read the original announcement →

https://docs.cloud.google.com/release-notes#September_08_2026

Related releases

Gemini Enterprise Agent Platform: VPC Connectivity Templates for Agent Gateway Google Cloud release notes · 1d ago
BigQuery Conversational Analytics Adds AI.PREDICT for Predictive Modeling Google Cloud release notes · 1d ago
Gemini Enterprise adds semantic search to Google Cloud Marketplace Google Cloud release notes · 1d ago
Google Cloud Contact Center Adds Real-time Call Projection and Dashboard Fixes Google Cloud release notes · 1d ago
GKE 1.37 Now Available, Deprecates Identity Service for GKE Google Cloud release notes · 5d ago
Cloud Trace Observability API now supports VPC Service Controls Google Cloud release notes · 1d ago