Container Optimized OS

100 updates from Google Cloud.

Security: Fixed CVE-2026-23458 in the Linux kernel.

Fixed CVE-2026-23458 in the Linux kernel.

May 9, 2026Read more

Container Optimized OSchange

Apply hardening sysctls on cchost boards.

May 9, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-31614 in the Linux kernel.

Fixed CVE-2026-31614 in the Linux kernel.

May 9, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-43284 (dirtyfrag) in the Linux kernel.

Fixed CVE-2026-43284 (dirtyfrag) in the Linux kernel.

May 9, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-31700 in the Linux kernel.

Fixed CVE-2026-31700 in the Linux kernel.

May 9, 2026Read more

Container Optimized OS

Security: Upgraded dev-libs/libgcrypt to v1.10.4 to fix CVE-2026-41989.

Upgraded dev-libs/libgcrypt to v1.10.4 to fix CVE-2026-41989.

May 9, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-43012 in the Linux kernel.

Fixed CVE-2026-43012 in the Linux kernel.

May 9, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-35385 and CVE-2026-35386 in net-misc/openssh.

Fixed CVE-2026-35385 and CVE-2026-35386 in net-misc/openssh.

May 9, 2026Read more

Container Optimized OSchange

Enabled mm hardening kernel cmdlines on cchost.

May 9, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-23302 in the Linux kernel.

Fixed CVE-2026-23302 in the Linux kernel.

May 9, 2026Read more

Container Optimized OS

Security: Upgraded cos-gpu-installer to v2.6.8.

Upgraded cos-gpu-installer to v2.6.8.

May 9, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-23255 in the Linux kernel.

Fixed CVE-2026-23255 in the Linux kernel.

May 9, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-43284 (dirtyfrag) in the Linux kernel.

Fixed CVE-2026-43284 (dirtyfrag) in the Linux kernel.

May 8, 2026Read more

Container Optimized OS

Fixed: Upgraded dev-libs/expat to v2.7.4.

Upgraded dev-libs/expat to v2.7.4.

May 8, 2026Read more

Container Optimized OS

Fixed: Upgraded sys-process/procps to v4.0.6.

Upgraded sys-process/procps to v4.0.6.

May 8, 2026Read more

Container Optimized OS

Security: Upgraded dev-libs/libgcrypt to v1.10.4 to fix CVE-2026-41989.

Upgraded dev-libs/libgcrypt to v1.10.4 to fix CVE-2026-41989.

May 8, 2026Read more

Container Optimized OS

Fixed: Upgraded sys-libs/talloc to v2.4.4.

Upgraded sys-libs/talloc to v2.4.4.

May 8, 2026Read more

Container Optimized OSchange

Runtime sysctl changes: Changed: net.ipv4.udp_mem: 188034 250714 376068 -> 188034 250715 376068

May 8, 2026Read more

Container Optimized OS

Fixed: Upgraded net-fs/cifs-utils to v7.5.

Upgraded net-fs/cifs-utils to v7.5.

May 8, 2026Read more

Container Optimized OS

Fixed: Upgraded sys-libs/libseccomp to v2.6.0-r3.

Upgraded sys-libs/libseccomp to v2.6.0-r3.

May 8, 2026Read more

Container Optimized OS

Fixed: Upgraded net-libs/libnetfilter_conntrack to v1.1.1.

Upgraded net-libs/libnetfilter_conntrack to v1.1.1.

May 8, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-43012 in the Linux kernel.

Fixed CVE-2026-43012 in the Linux kernel.

May 8, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-31693 in the Linux kernel.

Fixed CVE-2026-31693 in the Linux kernel.

May 8, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-35385 and CVE-2026-35386 in net-misc/openssh.

Fixed CVE-2026-35385 and CVE-2026-35386 in net-misc/openssh.

May 8, 2026Read more

Container Optimized OSchange

Enabled mm hardening kernel cmdlines on cchost.

May 8, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-31700 in the Linux kernel.

Fixed CVE-2026-31700 in the Linux kernel.

May 8, 2026Read more

Container Optimized OSchange

Apply hardening sysctls on cchost boards.

May 8, 2026Read more

Container Optimized OS

Fixed: Upgraded dev-db/sqlite to v3.51.2.

Upgraded dev-db/sqlite to v3.51.2.

May 8, 2026Read more

Container Optimized OSannouncement

This is an LTS Refresh release.

This is an <a href="https://docs.cloud.google.com/container-optimized-os/docs/concepts/versioning#lts_refresh_releases">LTS Refresh release.</a>

May 8, 2026Read more

Container Optimized OS

Security: Upgraded cos-gpu-installer to v2.6.8.

Upgraded cos-gpu-installer to v2.6.8.

May 8, 2026Read more

Container Optimized OS

Fixed: Upgraded sys-apps/acl to v2.3.2-r3.

Upgraded sys-apps/acl to v2.3.2-r3.

May 8, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-23411 in the Linux kernel.

Fixed CVE-2026-23411 in the Linux kernel.

May 7, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-31738 in the Linux kernel.

Fixed CVE-2026-31738 in the Linux kernel.

May 7, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-35385 in net-misc/openssh.

Fixed CVE-2026-35385 in net-misc/openssh.

May 7, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-43013 in the Linux kernel.

Fixed CVE-2026-43013 in the Linux kernel.

May 7, 2026Read more

Container Optimized OS

Security: Upgraded cos-gpu-installer to v2.6.8.

Upgraded cos-gpu-installer to v2.6.8.

May 7, 2026Read more

Container Optimized OS

Fixed: Upgraded sys-process/lsof to v4.99.6.

Upgraded sys-process/lsof to v4.99.6.

May 4, 2026Read more

Container Optimized OS

Security: Fixed CVE-2025-37980 in the Linux kernel.

Fixed CVE-2025-37980 in the Linux kernel.

May 4, 2026Read more

Container Optimized OSchange

Runtime sysctl changes: Changed: net.ipv4.udp_mem: 188034 250714 376068 -> 188034 250715 376068

May 4, 2026Read more

Container Optimized OS

Security: Fixed KCTF-42156f9 in the Linux kernel.

Fixed KCTF-42156f9 in the Linux kernel.

May 4, 2026Read more

Container Optimized OS

Security: Fixed CVE-2025-22116 in the Linux kernel.

Fixed CVE-2025-22116 in the Linux kernel.

May 4, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-23138 in the Linux kernel.

Fixed CVE-2026-23138 in the Linux kernel.

May 4, 2026Read more

Container Optimized OS

Security: Upgraded openssl to v3.0.20 to fix CVE-2026-28387, CVE-2026-28388,CVE-2026-28389,CVE-2026-28390,CVE-2026-31790.

Upgraded openssl to v3.0.20 to fix CVE-2026-28387, CVE-2026-28388,CVE-2026-28389,CVE-2026-28390,CVE-2026-31790.

May 4, 2026Read more

Container Optimized OS

Security: Fixed KCTF-a9b8b18 in the Linux kernel.

Fixed KCTF-a9b8b18 in the Linux kernel.

May 4, 2026Read more

Container Optimized OS

Security: Fixed CVE-2025-21709 in the Linux kernel.

Fixed CVE-2025-21709 in the Linux kernel.

May 4, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-23245 in the Linux kernel.

Fixed CVE-2026-23245 in the Linux kernel.

May 4, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-31403 in the Linux kernel.

Fixed CVE-2026-31403 in the Linux kernel.

May 4, 2026Read more

Container Optimized OS

Security: Upgraded dev-libs/openssl to v3.5.6 to fix CVE-2026-28387, CVE-2026-28388,CVE-2026-28389,CVE-2026-28390,CVE-2026-31790.

Upgraded dev-libs/openssl to v3.5.6 to fix CVE-2026-28387, CVE-2026-28388,CVE-2026-28389,CVE-2026-28390,CVE-2026-31790.

May 4, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-23004 in the Linux kernel.

Fixed CVE-2026-23004 in the Linux kernel.

May 4, 2026Read more

Container Optimized OS

Security: Fixed CVE-2025-39764 in the Linux kernel.

Fixed CVE-2025-39764 in the Linux kernel.

May 4, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-23441 in the Linux kernel.

Fixed CVE-2026-23441 in the Linux kernel.

May 4, 2026Read more

Container Optimized OSfeature

Added the cos_kernel_args tool that allows manipulating kernel command line arguments of a COS image.

May 4, 2026Read more

Container Optimized OS

Fixed: Upgraded app-shells/dash to v0.5.13.3.

Upgraded app-shells/dash to v0.5.13.3.

May 4, 2026Read more

Container Optimized OS

Security: Fixed CVE-2025-40135 in the Linux kernel.

Fixed CVE-2025-40135 in the Linux kernel.

May 4, 2026Read more

Container Optimized OS

Security: Fixed CVE-2025-71161 in the Linux kernel.

Fixed CVE-2025-71161 in the Linux kernel.

May 4, 2026Read more

Container Optimized OS

Fixed: Upgraded sys-apps/makedumpfile to v1.7.9.

Upgraded sys-apps/makedumpfile to v1.7.9.

May 4, 2026Read more

Container Optimized OS

Security: Fixed CVE-2025-68239 in the Linux kernel.

Fixed CVE-2025-68239 in the Linux kernel.

May 4, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-31532 in the Linux kernel.

Fixed CVE-2026-31532 in the Linux kernel.

May 4, 2026Read more

Container Optimized OS

Fixed: Upgraded app-admin/sosreport to v4.11.1.

Upgraded app-admin/sosreport to v4.11.1.

May 4, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-31628 in the Linux kernel.

Fixed CVE-2026-31628 in the Linux kernel.

May 4, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-23368 in the Linux kernel.

Fixed CVE-2026-23368 in the Linux kernel.

May 4, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-27140, CVE-2026-27144 in dev-lang/go.

Fixed CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-27140, CVE-2026-27144 in dev-lang/go.

May 1, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-23375 in the Linux kernel.

Fixed CVE-2026-23375 in the Linux kernel.

May 1, 2026Read more

Container Optimized OSchange

Runtime sysctl changes: Changed: net.ipv4.udp_mem: 188034 250715 376068 -> 188034 250714 376068

May 1, 2026Read more

Container Optimized OSchange

Added support for the R595 Nvidia driver production branch.

May 1, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-31664 in the Linux kernel.

Fixed CVE-2026-31664 in the Linux kernel.

May 1, 2026Read more

Container Optimized OS

Fixed: Fixed an ext4/jbd2 performance regression on CPU Node.

Fixed an ext4/jbd2 performance regression on CPU Node.

May 1, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-4046 in sys-libs/glibc.

Fixed CVE-2026-4046 in sys-libs/glibc.

May 1, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-23276 in the Linux kernel.

Fixed CVE-2026-23276 in the Linux kernel.

May 1, 2026Read more

Container Optimized OS

Fixed: Upgraded sys-apps/makedumpfile to v1.7.9.

Upgraded sys-apps/makedumpfile to v1.7.9.

May 1, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-34743 in app-arch/xz-utils.

Fixed CVE-2026-34743 in app-arch/xz-utils.

May 1, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-31392 in the Linux kernel.

Fixed CVE-2026-31392 in the Linux kernel.

May 1, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-31515 in the Linux kernel.

Fixed CVE-2026-31515 in the Linux kernel.

May 1, 2026Read more

Container Optimized OS

Fixed: Fixed KCTF-42156f9 in the Linux kernel.

Fixed KCTF-42156f9 in the Linux kernel.

May 1, 2026Read more

Container Optimized OS

Fixed: Optimized IOMMU reference counting using atomic64_inc_return().

Optimized IOMMU reference counting using atomic64_inc_return().

May 1, 2026Read more

Container Optimized OS

Fixed: Added support for NVIDIA drivers v580.126.16 and v580.126.20.

Added support for NVIDIA drivers v580.126.16 and v580.126.20.

May 1, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-31400 in the Linux kernel.

Fixed CVE-2026-31400 in the Linux kernel.

May 1, 2026Read more

Container Optimized OSchange

Made it so that /etc/machine-id is mounted with noexec, nosuid, and nodev.

May 1, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-23401 in the Linux kernel.

Fixed CVE-2026-23401 in the Linux kernel.

May 1, 2026Read more

Container Optimized OS

Security: Fixed KCTF-42156f9 in the Linux kernel.

Fixed KCTF-42156f9 in the Linux kernel.

May 1, 2026Read more

Container Optimized OS

Fixed: Serialized sequence allocation to prevent timeouts during concurrent TLB invalidations.

Serialized sequence allocation to prevent timeouts during concurrent TLB invalidations.

May 1, 2026Read more

Container Optimized OSfeature

Enabled CONFIG_SCHED_CLASS_EXT and CONFIG_EXT_GROUP_SCHED.

May 1, 2026Read more

Container Optimized OS

Fixed: Added support for NVIDIA drivers v580.126.16 and v580.126.20.

Added support for NVIDIA drivers v580.126.16 and v580.126.20.

Apr 28, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-23412 in the Linux kernel.

Fixed CVE-2026-23412 in the Linux kernel.

Apr 28, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-31392 in the Linux kernel.

Fixed CVE-2026-31392 in the Linux kernel.

Apr 28, 2026Read more

Container Optimized OS

Fixed: Fixed KCTF-42156f9 in the Linux kernel.

Fixed KCTF-42156f9 in the Linux kernel.

Apr 28, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-23245 in the Linux kernel.

Fixed CVE-2026-23245 in the Linux kernel.

Apr 28, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-27140, CVE-2026-27144 in dev-lang/go.

Fixed CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-27140, CVE-2026-27144 in dev-lang/go.

Apr 28, 2026Read more

Container Optimized OS

Security: Fixed CVE-2025-70873 in dev-db/sqlite.

Fixed CVE-2025-70873 in dev-db/sqlite.

Apr 28, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-31400 in the Linux kernel.

Fixed CVE-2026-31400 in the Linux kernel.

Apr 28, 2026Read more

Container Optimized OS

Fixed: Upgraded app-shells/dash to v0.5.13.3.

Upgraded app-shells/dash to v0.5.13.3.

Apr 28, 2026Read more

Container Optimized OS

Security: Fixed KCTF-42156f9 in the Linux kernel.

Fixed KCTF-42156f9 in the Linux kernel.

Apr 28, 2026Read more

Container Optimized OS

Fixed: Upgraded app-admin/sosreport to v4.11.1.

Upgraded app-admin/sosreport to v4.11.1.

Apr 28, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-4046 in sys-libs/glibc.

Fixed CVE-2026-4046 in sys-libs/glibc.

Apr 28, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-34743 in app-arch/xz-utils.

Fixed CVE-2026-34743 in app-arch/xz-utils.

Apr 28, 2026Read more

Container Optimized OS

Security: Fixed CVE-2025-22116 in the Linux kernel.

Fixed CVE-2025-22116 in the Linux kernel.

Apr 28, 2026Read more

Container Optimized OS

Fixed: Upgraded sys-apps/makedumpfile to v1.7.9.

Upgraded sys-apps/makedumpfile to v1.7.9.

Apr 28, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-31648 in the Linux kernel.

Fixed CVE-2026-31648 in the Linux kernel.

Apr 28, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-23302 in the Linux kernel.

Fixed CVE-2026-23302 in the Linux kernel.

Apr 28, 2026Read more

Container Optimized OSchange

Added support for the R595 Nvidia driver production branch.

Apr 28, 2026Read more

Container Optimized OS

Security: Fixed CVE-2026-23458 in the Linux kernel.

Apply hardening sysctls on cchost boards.

Security: Fixed CVE-2026-31614 in the Linux kernel.

Security: Fixed CVE-2026-43284 (dirtyfrag) in the Linux kernel.

Security: Fixed CVE-2026-31700 in the Linux kernel.

Security: Upgraded dev-libs/libgcrypt to v1.10.4 to fix CVE-2026-41989.

Security: Fixed CVE-2026-43012 in the Linux kernel.

Security: Fixed CVE-2026-35385 and CVE-2026-35386 in net-misc/openssh.

Enabled mm hardening kernel cmdlines on cchost.

Security: Fixed CVE-2026-23302 in the Linux kernel.

Security: Upgraded cos-gpu-installer to v2.6.8.

Security: Fixed CVE-2026-23255 in the Linux kernel.

Security: Fixed CVE-2026-43284 (dirtyfrag) in the Linux kernel.

Fixed: Upgraded dev-libs/expat to v2.7.4.

Fixed: Upgraded sys-process/procps to v4.0.6.

Security: Upgraded dev-libs/libgcrypt to v1.10.4 to fix CVE-2026-41989.

Fixed: Upgraded sys-libs/talloc to v2.4.4.

Runtime sysctl changes: Changed: net.ipv4.udp_mem: 188034 250714 376068 -&gt; 188034 250715 376068

Fixed: Upgraded net-fs/cifs-utils to v7.5.

Fixed: Upgraded sys-libs/libseccomp to v2.6.0-r3.

Fixed: Upgraded net-libs/libnetfilter_conntrack to v1.1.1.

Security: Fixed CVE-2026-43012 in the Linux kernel.

Security: Fixed CVE-2026-31693 in the Linux kernel.

Security: Fixed CVE-2026-35385 and CVE-2026-35386 in net-misc/openssh.

Enabled mm hardening kernel cmdlines on cchost.

Security: Fixed CVE-2026-31700 in the Linux kernel.

Apply hardening sysctls on cchost boards.

Fixed: Upgraded dev-db/sqlite to v3.51.2.

This is an LTS Refresh release.

Security: Upgraded cos-gpu-installer to v2.6.8.

Fixed: Upgraded sys-apps/acl to v2.3.2-r3.

Security: Fixed CVE-2026-23411 in the Linux kernel.

Security: Fixed CVE-2026-31738 in the Linux kernel.

Security: Fixed CVE-2026-35385 in net-misc/openssh.

Security: Fixed CVE-2026-43013 in the Linux kernel.

Security: Upgraded cos-gpu-installer to v2.6.8.

Fixed: Upgraded sys-process/lsof to v4.99.6.

Security: Fixed CVE-2025-37980 in the Linux kernel.

Runtime sysctl changes: Changed: net.ipv4.udp_mem: 188034 250714 376068 -&gt; 188034 250715 376068

Security: Fixed KCTF-42156f9 in the Linux kernel.

Security: Fixed CVE-2025-22116 in the Linux kernel.

Security: Fixed CVE-2026-23138 in the Linux kernel.

Security: Upgraded openssl to v3.0.20 to fix CVE-2026-28387, CVE-2026-28388,CVE-2026-28389,CVE-2026-28390,CVE-2026-31790.

Security: Fixed KCTF-a9b8b18 in the Linux kernel.

Security: Fixed CVE-2025-21709 in the Linux kernel.

Security: Fixed CVE-2026-23245 in the Linux kernel.

Security: Fixed CVE-2026-31403 in the Linux kernel.

Security: Upgraded dev-libs/openssl to v3.5.6 to fix CVE-2026-28387, CVE-2026-28388,CVE-2026-28389,CVE-2026-28390,CVE-2026-31790.

Security: Fixed CVE-2026-23004 in the Linux kernel.

Security: Fixed CVE-2025-39764 in the Linux kernel.

Security: Fixed CVE-2026-23441 in the Linux kernel.

Added the cos_kernel_args tool that allows manipulating kernel command line arguments of a COS image.

Fixed: Upgraded app-shells/dash to v0.5.13.3.

Security: Fixed CVE-2025-40135 in the Linux kernel.

Security: Fixed CVE-2025-71161 in the Linux kernel.

Fixed: Upgraded sys-apps/makedumpfile to v1.7.9.

Security: Fixed CVE-2025-68239 in the Linux kernel.

Security: Fixed CVE-2026-31532 in the Linux kernel.

Fixed: Upgraded app-admin/sosreport to v4.11.1.

Security: Fixed CVE-2026-31628 in the Linux kernel.

Security: Fixed CVE-2026-23368 in the Linux kernel.

Security: Fixed CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-27140, CVE-2026-27144 in dev-lang/go.

Security: Fixed CVE-2026-23375 in the Linux kernel.

Runtime sysctl changes: Changed: net.ipv4.udp_mem: 188034 250715 376068 -&gt; 188034 250714 376068

Added support for the R595 Nvidia driver production branch.

Security: Fixed CVE-2026-31664 in the Linux kernel.

Fixed: Fixed an ext4/jbd2 performance regression on CPU Node.

Security: Fixed CVE-2026-4046 in sys-libs/glibc.

Security: Fixed CVE-2026-23276 in the Linux kernel.

Fixed: Upgraded sys-apps/makedumpfile to v1.7.9.

Security: Fixed CVE-2026-34743 in app-arch/xz-utils.

Security: Fixed CVE-2026-31392 in the Linux kernel.

Security: Fixed CVE-2026-31515 in the Linux kernel.

Fixed: Fixed KCTF-42156f9 in the Linux kernel.

Fixed: Optimized IOMMU reference counting using atomic64_inc_return().

Fixed: Added support for NVIDIA drivers v580.126.16 and v580.126.20.

Security: Fixed CVE-2026-31400 in the Linux kernel.

Made it so that /etc/machine-id is mounted with noexec, nosuid, and nodev.

Security: Fixed CVE-2026-23401 in the Linux kernel.

Runtime sysctl changes: Changed: net.ipv4.udp_mem: 188034 250714 376068 -> 188034 250715 376068

Runtime sysctl changes: Changed: net.ipv4.udp_mem: 188034 250714 376068 -> 188034 250715 376068

Runtime sysctl changes: Changed: net.ipv4.udp_mem: 188034 250715 376068 -> 188034 250714 376068