Published: 2026-11-04Reference: CVE-2026-98432 Description Severity A vulnerability (CVE-2026-98432) was discovered in the Linux kernel IPv4 TCP stack. The flaw can cause a kernel panic or a container escape (root code execution on the node). An unprivileged process in a container can trigger it locally, without special capabilities such as CAP_NET_RAW. A network attacker can also trigger it by se…
Published: 2026-10-23 Updated: 2026-10-27 Reference: CVE-2026-1119432026-10-27 Update: Added patch versions for Ubuntu and GKE 1.37 on Container-Optimized OS, and clarified that GKE system containers and Go runtime components are patched. Description Severity What happened? Multiple eMudhra (emSign) subordinate Certificate Authority (CA) private keys were compromised (CVE-2026-111943). Unpatched T…
Published: 2026-09-09 Reference: GHSA-p7v4-vr35-mj6f Description Severity A security vulnerability GHSA-p7v4-vr35-mj6f (CVE assignment pending) in containerd's CRI implementation allows a container restored from an untrusted checkpoint through the CreateContainer API to bypass the destination security context and execute with elevated privileges. When restoring a container from a checkpoint archiv…
Published: 2026-09-02 Description Severity A missing project permission check in GKE Multi-Cloud (CreateAttachedCluster, CreateAwsCluster, CreateAzureCluster) APIs allowed an attacker to register an attached cluster into an arbitrary target project's Workload Identity Federation for GKE. This registration allowed unauthorized creation of Workload Identity tokens and impersonation of Kubernetes Ser…
Published: 2026-06-18Updated: 2026-06-20Reference: CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, CVE-2026-472622026-06-20 Update: Added GKE patch versions containing the fixes for Container-Optimized OS node images for minor versions 1.35 and 1.36. Patches for Ubuntu node images are still pending and in progress.2026-06-19 Update: Added GKE patch versions containing the fixes for…
Published: 2026-05-14 Reference: CVE-2026-46300 GKE Description Severity A container breakout vulnerability CVE-2026-46300 has been found in the Linux kernel, known as Fragnesia. It allows an unprivileged local attacker to escalate to root on the host. GKE Standard clusters with Ubuntu nodes are impacted. GKE Standard clusters with Container-Optimized OS nodes are not impacted. GKE Autopilot is no…
Published: 2026-05-11 Updated: 2026-06-24 Reference: CVE-2026-43284, CVE-2026-435002026-06-24 Update: Added patch versions for GKE.2026-05-20 Update: Added CVE-2026-43500 and added CVE IDs to exploit paths. GKE Updated: 2026-06-24 Description Severity Container breakout vulnerabilities CVE-2026-43284 and CVE-2026-43500 have been found in the Linux kernel, known as DirtyFrag. They allow an unprivil…
Published: 2026-05-01 Reference: CVE-2026-23351 GKE Description Severity The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS nodes: CVE-2026-23351 GKE Standard clusters are impacted. GKE Autopilot clusters in the default configuration are not impacted, but might be vulnerable if you explicitly set the seccomp Unconfine…
Published: 2026-04-30 Reference: CVE-2026-23274 GKE Description Severity The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS nodes: CVE-2026-23274 GKE Standard clusters are impacted. GKE Autopilot clusters in the default configuration are not impacted, but might be vulnerable if you explicitly set the seccomp Unconfine…
Published: 2026-04-30 Updated: 2026-05-04 Reference: CVE-2026-314312026-05-04 Update: Added patch versions for GKE. GKE Updated: 2026-05-04 Description Severity A vulnerability in the Linux kernel (CVE-2026-31431) allows an unprivileged local attacker to write to the system page cache, potentially leading to local privilege escalation and container escape. GKE Standard and Autopilot clusters are a…
Published: 2026-04-28 Updated: 2026-05-07 Reference: CVE-2026-230742026-05-07 Update: Added patch versions for Ubuntu node pools on GKE. GKE Updated: 2026-05-07 Description Severity The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS nodes: CVE-2026-23074 GKE Standard clusters are impacted. GKE Autopilot clusters in th…
Published: 2026-04-28 Reference: CVE-2025-38248 GKE Description Severity The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS and Ubuntu nodes: CVE-2025-38248 GKE Standard clusters are impacted. GKE Autopilot clusters in the default configuration are not impacted, but might be vulnerable if you explicitly set the seccom…
Published: 2026-04-16 Reference: CVE-2026-23209 GKE Description Severity The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS nodes: CVE-2026-23209 GKE Standard clusters are impacted. GKE Autopilot clusters in the default configuration are not impacted, but might be vulnerable if you explicitly set the seccomp Unconfine…
Published: 2026-04-14 Reference: CVE-2026-23231 GKE Description Severity The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS nodes: CVE-2026-23231 GKE Standard clusters are impacted. GKE Autopilot clusters in the default configuration are not impacted, but might be vulnerable if you explicitly set the seccomp Unconfine…
Published: 2026-04-07 Updated: 2026-04-15 Reference: CVE-2026-231112026-04-15 Update: Added patch versions for Ubuntu nodes with GKE. GKE Updated: 2026-04-15 Description Severity The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS nodes: CVE-2026-23111 GKE Standard clusters are impacted. GKE Autopilot clusters in the d…
Published: 2026-04-02 Reference: CVE-2026-23273 GKE Description Severity The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS nodes: CVE-2026-23273 GKE Standard clusters are impacted. GKE Autopilot clusters in the default configuration are not impacted, but might be vulnerable if you explicitly set the seccomp Unconfine…
Published: 2026-03-27 Updated: 2026-03-31 Reference: CVE-2025-386162026-03-31 Update: Added patch versions for Ubuntu nodes with GKE. GKE Updated: 2026-03-31 Description Severity The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS nodes: CVE-2025-38616 GKE Standard and Autopilot clusters are impacted. Clusters using GK…
Published: 2026-03-14 Updated: 2026-03-25 Reference: CVE-2025-386782026-03-25 Update: Added patch versions for Ubuntu nodes with GKE. GKE Updated: 2026-03-25 Description Severity The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS nodes: CVE-2025-38678 GKE Standard clusters are impacted. GKE Autopilot clusters in the d…
Published: 2026-02-09 Updated: 2026-03-25 Reference: CVE-2025-402972026-03-25 Update: Added patch versions for Ubuntu nodes with GKE. GKE Updated: 2026-03-25 Description Severity The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS nodes: CVE-2025-40297 GKE Standard clusters are impacted. GKE Autopilot clusters in the d…
Published: 2026-01-29Updated: 2026-02-20Reference: CVE-2025-154672026-02-20 Update: Added patch versions for GKE. GKE Updated: 2026-02-20 Description Severity Multiple security vulnerabilities have been identified in the OpenSSL library. The most significant finding is CVE-2025-15467, a critical vulnerability that might allow for remote code execution (RCE) or denial of service (DoS) attacks via n…
Published: 2026-01-09 Updated: 2026-03-25 Reference: CVE-2025-399642026-03-25 Update: Added patch versions for Ubuntu nodes with GKE. GKE Updated: 2026-03-25 Description Severity The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS nodes: CVE-2025-39964 GKE Standard and Autopilot clusters are impacted. Clusters using GK…
Published: 2026-01-07 Reference: CVE-2025-40214 GKE Description Severity The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS nodes: CVE-2025-40214 GKE Standard and Autopilot clusters are impacted. Clusters using GKE Sandbox aren't impacted. What should I do? The following minor versions are affected. Upgrade your Conta…
Published: 2026-01-07 Updated: 2026-03-25 Reference: CVE-2025-402152026-03-25 Update: Added patch versions for Ubuntu nodes with GKE. GKE Updated: 2026-03-25 Description Severity The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS nodes: CVE-2025-40215 GKE Standard clusters are impacted. GKE Autopilot clusters in the d…
Published: 2025-12-05 Reference: CVE-2025-39965 GKE Description Severity The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS nodes: CVE-2025-39965 GKE Standard clusters are impacted. GKE Autopilot clusters in the default configuration are not impacted, but might be vulnerable if you explicitly set the seccomp Unconfine…
Published: 2025-12-02 Updated: 2026-03-25 Reference: CVE-2025-400182026-03-25 Update: Added patch versions for Ubuntu nodes with GKE.2025-12-11 Update: Added patch versions and a severity rating for GDC (VMware). GKE Updated: 2026-03-25 Description Severity The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS nodes: CVE…
Published: 2025-12-02 Updated: 2026-03-25 Reference: CVE-2025-400192026-03-25 Update: Added patch versions for Ubuntu nodes with GKE.2025-12-11 Update: Added patch versions and a severity rating for GDC (VMware). GKE Updated: 2026-03-25 Description Severity The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS nodes: CVE…
Published: 2025-11-10 Updated: 2025-11-27 Reference: CVE-2025-31133, CVE-2025-52565, CVE-2025-528812025-11-27 Update: Added patch versions for GKE and GDC (bare metal). GKE Updated: 2025-11-27 Description Severity Several security issues have been discovered in runc, an open source software component used for running containers on GKE. The vulnerabilities (CVE-2025-31133, CVE-2025-52565, and CVE-2…
Published: 2025-10-28 Updated: 2025-11-17 Reference: CVE-2025-396822025-10-30 Update: Added patch versions and a severity rating for GDC software for VMware. GKE Updated: 2025-11-17 Description Severity The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS nodes: CVE-2025-39682 GKE Standard and Autopilot clusters are imp…
Published: 2025-10-22 Updated: 2025-10-30 Reference: CVE-2024-582402025-10-30 Update: Added patch versions for Ubuntu nodes on GKE, and patch versions and a severity rating for GDC software for VMware. GKE Updated: 2025-10-30 Description Severity The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS nodes: CVE-2024-58240…
Published: 2025-10-17 Updated: 2025-11-11 Reference: CVE-2025-386182025-11-11 Update: Added patch versions for Ubuntu node pools in GKE.2025-10-27 Update: Added patch versions and a severity rating for GDC software for VMware. GKE Updated: 2025-11-11 Description Severity The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized…