Container Optimized OS 129 - Release notes

October 30, 2026

2026-10-30T00:00:00-07:00

Change

cos-129-19506-578-33

Kernel	Docker	Containerd	GPU Drivers
COS-6.12.113	v27.5.1	v2.2.7	See List

Fixed

Fixed an IDPF bug that could cause indefinite IPv4 route loss after a hard NIC reset.

Feature

Enabled EROFS support.

Fixed

Added support for NVIDIA driver v580.196.07.

Fixed

Added support for NVIDIA driver v595.112.07.

Fixed

Upgraded app-arch/zstd to v1.5.7-r1.

Fixed

Upgraded app-containers/docker-credential-helpers to v0.9.12.

Fixed

Upgraded app-editors/vim to v9.2.1229, Upgraded app-editors/vim-core to v9.2.1229.

Fixed

Upgraded app-misc/ca-certificates to v20260816.3.131.1.

Fixed

Upgraded dev-db/sqlite to v3.54.1.

Fixed

Upgraded dev-libs/expat to v2.9.0.

Fixed

Upgraded dev-libs/nss to v3.132.

Fixed

Upgraded net-fs/nfs-utils to v2.6.4.

Fixed

Upgraded sys-libs/libxcrypt to v4.4.38-r1.

Security

Fixed CVE-2026-33186 in cni-plugins.

Security

Fixed CVE-2026-33186 in containerd.

Security

Fixed CVE-2026-33186 in google-osconfig-agent.

Security

Fixed CVE-2026-42508, CVE-2026-39834, CVE-2026-39832, CVE-2026-39831, CVE-2026-46595 in google-osconfig-agent.

Security

Fixed KCTF-d095321 in the Linux kernel.

Security

Updated app-arch/brotli to 1.0.10. This resolves CVE-2026-111497.

October 27, 2026

2026-10-27T00:00:00-07:00

Change

cos-129-19506-578-21

Kernel	Docker	Containerd	GPU Drivers
COS-6.12.113	v27.5.1	v2.2.7	See List

Change

Updated app-admin/google-guest-configs to v20261025.00.

Security

Fixed CVE-2026-77214 in dev-libs/expat.

Change

Runtime sysctl changes:

Changed: fs.epoll.max_user_watches: 1808562 -> 1808517
Changed: fs.fanotify.max_user_marks: 68416 -> 68412
Changed: fs.inotify.max_user_watches: 64192 -> 64189
Changed: kernel.threads-max: 63183 -> 63178
Changed: net.ipv4.tcp_mem: 94020 125361 188040 -> 94017 125357 188034
Changed: net.ipv4.udp_mem: 188040 250722 376080 -> 188034 250715 376068
Changed: user.max_cgroup_namespaces: 31591 -> 31589
Changed: user.max_fanotify_marks: 68416 -> 68412
Changed: user.max_inotify_watches: 64192 -> 64189
Changed: user.max_ipc_namespaces: 31591 -> 31589
Changed: user.max_mnt_namespaces: 31591 -> 31589
Changed: user.max_net_namespaces: 31591 -> 31589
Changed: user.max_pid_namespaces: 31591 -> 31589
Changed: user.max_time_namespaces: 31591 -> 31589
Changed: user.max_user_namespaces: 31591 -> 31589
Changed: user.max_uts_namespaces: 31591 -> 31589

October 22, 2026

2026-10-22T00:00:00-07:00

Change

cos-129-19506-578-9

Kernel	Docker	Containerd	GPU Drivers
COS-6.12.113	v27.5.1	v2.2.7	See List

Announcement

This is an LTS Refresh release.

Fixed

Updated cos-gpu-installer to v2.7.11 and toolbox to v20261020.

Fixed

Upgraded app-misc/ca-certificates to v20260816.3.125. This removes the certificates affected by the eMudhra intermediate certificate compromise.

Fixed

Upgraded dev-libs/nss to v3.131.1. This removes the certificates affected by the eMudhra intermediate certificate compromise.

Security

Fixed CVE-2026-111943 in dev-lang/go.

Security

Fixed CVE-2026-33186 in cri-tools.

Security

Fixed CVE-2026-39831 in node-problem-detector.

Security

Fixed CVE-2026-39833 in nvidia-container-toolkit.

Security

Fixed CVE-2026-46595, CVE-2026-39832 in cri-tools.

Security

Fixed CVE-2026-98432 in the Linux kernel.

Change

Runtime sysctl changes:

Changed: fs.epoll.max_user_watches: 1808517 -> 1808562
Changed: fs.fanotify.max_user_marks: 68412 -> 68416
Changed: fs.inotify.max_user_watches: 64189 -> 64192
Changed: kernel.threads-max: 63178 -> 63183
Changed: net.ipv4.tcp_mem: 94017 125357 188034 -> 94020 125361 188040
Changed: net.ipv4.udp_mem: 188034 250715 376068 -> 188040 250722 376080
Changed: user.max_cgroup_namespaces: 31589 -> 31591
Changed: user.max_fanotify_marks: 68412 -> 68416
Changed: user.max_inotify_watches: 64189 -> 64192
Changed: user.max_ipc_namespaces: 31589 -> 31591
Changed: user.max_mnt_namespaces: 31589 -> 31591
Changed: user.max_net_namespaces: 31589 -> 31591
Changed: user.max_pid_namespaces: 31589 -> 31591
Changed: user.max_time_namespaces: 31589 -> 31591
Changed: user.max_user_namespaces: 31589 -> 31591
Changed: user.max_uts_namespaces: 31589 -> 31591

October 19, 2026

2026-10-19T00:00:00-07:00

Change

cos-129-19506-549-22

Kernel	Docker	Containerd	GPU Drivers
COS-6.12.112	v27.5.1	v2.2.7	See List

Fixed

Added support for loading the pci-pf-stub module.

Fixed

Fix docker cp failure when copying to/from containers with nested bind mounts.

Fixed

Upgraded app-editors/vim to v9.2.1152, Upgraded app-editors/vim-core to v9.2.1152.

Security

Fix CVE-2026-19445 by upgrading to python 3.11.17.

Security

Fix CVE-2026-82474 on app-admin/sudo

Security

Fixed CVE-2026-5435 in sys-libs/glibc.

Security

Fixed CVE-2026-99999 in the Linux kernel.

Security

Upgraded dev-lang/python to v3.11.16. This fixes CVE-2026-6100.

October 12, 2026

2026-10-12T00:00:00-07:00

Change

cos-129-19506-549-7

Kernel	Docker	Containerd	GPU Drivers
COS-6.12.112	v27.5.1	v2.2.7	See List

Announcement

This is an LTS Refresh release.

Fixed

Added support for lustre v2.14.0_p262-r1

Security

Fixed CVE-2026-18220 in sys-libs/binutils-libs.

Security

Fixed CVE-2026-5450 in sys-libs/glibc.

Security

Patch CVE-2026-49264, CVE-2026-49265 on dev-python/oauthlib.

October 06, 2026

2026-10-06T00:00:00-07:00

Change

cos-129-19506-505-25

Kernel	Docker	Containerd	GPU Drivers
COS-6.12.110	v27.5.1	v2.2.7	See List

Change

Updated dev-libs/openssl to v3.5.9.

Fixed

Added support for NVIDIA driver v595.91.07.

Fixed

Added support for net-fs/lustre-client-drivers v2.14.0_p262.

Fixed

Added the "watchdog_timeout" module parameter to the idpf driver.

Fixed

Rebuilt Go binaries with Go 1.25.14.

Fixed

Upgraded app-admin/google-guest-configs to v20260928.00.

Fixed

Upgraded dev-libs/expat to v2.8.5.

Fixed

Upgraded sys-apps/xemu to v0.0.11.

Fixed

Upgraded sys-libs/timezone-data to v2026e.

Fixed

Upgraded sys-process/lsof to v4.99.7.

Security

Fixed CVE-2026-5928 in sys-libs/glibc.

Security

Upgraded dev-libs/libxml2 to v2.15.4. This fixes CVE-2026-86140.

September 28, 2026

2026-09-28T00:00:00-07:00

Change

cos-129-19506-505-8

Kernel	Docker	Containerd	GPU Drivers
COS-6.12.110	v27.5.1	v2.2.7	See List

Announcement

This is an LTS Refresh release.

Change

Ensure time sync prior to TLS handshake.

Fixed

Added support for bare metal TPUs.

September 21, 2026

2026-09-21T00:00:00-07:00

Change

cos-129-19506-448-53

Kernel	Docker	Containerd	GPU Drivers
COS-6.12.105	v27.5.1	v2.2.7	See List

Feature

Added support for loading the CephFS kernel driver.

Feature

Fixed a performance issue in the GVE driver on multi-NUMA systems.

Fixed

Fixed an issue where temporary efivarfs mounts under /tmp could persist after boot.

Security

Fixed CVE-2026-0864 in dev-lang/python.

Security

Fixed CVE-2026-15308 in dev-lang/python.

Security

Upgraded net-misc/rsync to version 3.5.0. This fixes CVE-2026-53791, CVE-2026-53784, CVE-2026-53786, CVE-2026-53789, CVE-2026-53795, CVE-2026-53797, CVE-2026-53798, CVE-2026-53799, CVE-2026-53800, CVE-2026-53801, CVE-2026-53802, CVE-2026-53803, CVE-2026-70455, CVE-2026-70457, CVE-2026-70459, CVE-2026-70461, and CVE-2026-70463.

September 17, 2026

2026-09-17T00:00:00-07:00

Change

cos-129-19506-448-36

Kernel	Docker	Containerd	GPU Drivers
COS-6.12.105	v27.5.1	v2.2.7	See List

Security

Fixed CVE-2026-56391 in sys-apps/coreutils.

Security

Fixed CVE-2026-80590 in the Linux kernel.

Security

Fixed CVE-2026-80737 in the Linux kernel.

Security

Fixed CVE-2026-80788 in the Linux kernel.

Security

Fixed CVE-2026-80789 in the Linux kernel.

Security

Fixed CVE-2026-80791 in the Linux kernel.

Security

Fixed CVE-2026-80792 in the Linux kernel.

Security

Fixed CVE-2026-80793 in the Linux kernel.

Security

Fixed CVE-2026-80805 in the Linux kernel.

Security

Fixed CVE-2026-80806 in the Linux kernel.

Security

Fixed CVE-2026-80808 in the Linux kernel.

Security

Fixed CVE-2026-80837 in the Linux kernel.

Security

Fixed CVE-2026-80838 in the Linux kernel.

Security

Fixed CVE-2026-80839 in the Linux kernel.

Security

Fixed CVE-2026-80842 in the Linux kernel.

Security

Fixed CVE-2026-80843 in the Linux kernel.

Security

Fixed CVE-2026-80845 in the Linux kernel.

Security

Fixed CVE-2026-80852 in the Linux kernel.

Security

Fixed CVE-2026-80854 in the Linux kernel.

Security

Fixed CVE-2026-80855 in the Linux kernel.

Security

Fixed CVE-2026-80856 in the Linux kernel.

Security

Fixed CVE-2026-80862 in the Linux kernel.

Security

Fixed CVE-2026-80916 in the Linux kernel.

Security

Fixed CVE-2026-80917 in the Linux kernel.

September 08, 2026

2026-09-08T00:00:00-07:00

Change

cos-129-19506-448-20

Kernel	Docker	Containerd	GPU Drivers
COS-6.12.105	v27.5.1	v2.2.7	See List

Fixed

Fixed CVE-2026-33186 in app-containers/docker.

Fixed

Fixed docker cp failure when copying to/from containers with symlinked bind mounts.

Fixed

Fixed CVE-2026-33186 in app-admin/extensions-manager.

Fixed

Fixed CVE-2026-33186 in app-admin/google-osconfig-agent.

Fixed

Fixed CVE-2026-33186 in app-admin/node-problem-detector.

Fixed

Fixed CVE-2026-33186 in app-containers/containerd.

Fixed

Fixed CVE-2026-33186 in app-emulation/kubernetes.

Fixed

Upgraded app-containers/docker-credential-helpers to v0.9.9.

Fixed

Upgraded dev-db/sqlite to v3.53.4.

Fixed

Upgraded dev-libs/expat to v2.8.4.

Fixed

Upgraded dev-libs/xxhash to v0.8.3-r2.

Fixed

Upgraded net-libs/libnftnl to v1.2.9.

Fixed

Fixed CVE-2026-6238 in sys-libs/glibc.

Security

Updated dev-go/net to v0.55.0 to fix CVE-2026-25680.

Change

Runtime sysctl changes:

Changed: net.ipv4.udp_mem: 188034 250714 376068 -> 188034 250715 376068

August 31, 2026

2026-08-31T00:00:00-07:00

Change

cos-129-19506-448-8

Kernel	Docker	Containerd	GPU Drivers
COS-6.12.105	v27.5.1	v2.2.7	See List

Change

Updated containerd and containerd-test to v2.2.7.

Fixed

LTS Refresh from main-R129-cos-6.12 to release-R129-cos-6.12

Fixed

Upgraded app-admin/fluent-bit to v4.2.8.

Fixed

Upgraded app-arch/unzip to v6.0_p31.

Fixed

Upgraded app-shells/dash to v0.5.13.5.

Fixed

Upgraded dev-libs/libverto to v0.3.2-r1.

Fixed

Upgraded dev-libs/popt to v1.19-r1.

Fixed

Upgraded sys-apps/acl to v2.4.0-r2.

Fixed

Upgraded sys-auth/passwdqc to v2.0.3-r1.

Security

Fixed CVE-2026-68293 in the Linux kernel.

Security

Upgraded dev-libs/libxml2 to v2.15.3. This fixes CVE-2026-0989, CVE-2026-0990, and CVE-2026-0992.

Change

Runtime sysctl changes:

Changed: net.ipv4.udp_mem: 188034 250715 376068 -> 188034 250714 376068

August 24, 2026

2026-08-24T00:00:00-07:00

Change

cos-129-19506-299-161

Kernel	Docker	Containerd	GPU Drivers
COS-6.12.94	v27.5.1	v2.2.6	See List

Change

Updated cos-gpu-installer to v2.7.7.

Fixed

Added support for net-fs/lustre-client-drivers v2.14.0_p259.

Fixed

Upgraded sys-apps/xemu to v0.0.10.

Security

Fixed CVE-2026-68096 in the Linux kernel.

Security

Fixed CVE-2026-68096 in the Linux kernel.

Security

Fixed CVE-2026-68096 in the Linux kernel.

Security

Fixed CVE-2026-68129 in the linux kernel

Security

Fixed CVE-2026-68146 in the Linux kernel.

Security

Fixed CVE-2026-68325 in the Linux kernel.

Security

Fixed CVE-2026-68338 in the Linux kernel.

Security

Fixed CVE-2026-68422 in the Linux kernel.

Security

Fixed KCTF-0650f1c in the Linux Kernel.

August 19, 2026

2026-08-19T00:00:00-07:00

Change

cos-129-19506-299-148

Kernel	Docker	Containerd	GPU Drivers
COS-6.12.94	v27.5.1	v2.2.6	See List

Fixed

Updated cos-gpu-installer to v2.7.6.

Security

Fixed CVE-2026-68284 in the Linux kernel.

Security

Fixed CVE-2026-68398 in the Linux kernel.

Change

Runtime sysctl changes:

Changed: net.ipv4.udp_mem: 188034 250714 376068 -> 188034 250715 376068

August 17, 2026

2026-08-17T00:00:00-07:00

Change

cos-129-19506-299-137

Kernel	Docker	Containerd	GPU Drivers
COS-6.12.94	v27.5.1	v2.2.6	See List

Feature

Enabled CONFIG_UDMABUF on x86_64.

Security

Fixed CVE-2026-64561 in the Linux kernel.

Security

Fixed CVE-2026-64562 in the Linux kernel.

Security

Fixed CVE-2026-64567 in the Linux kernel.

Security

Fixed CVE-2026-64572 in the Linux kernel.

Security

Fixed CVE-2026-64576 in the Linux kernel.

Security

Fixed CVE-2026-64579 in the Linux kernel.

Security

Fixed CVE-2026-64590 in the Linux kernel.

Security

Fixed CVE-2026-64593 in the Linux kernel.

Security

Fixed CVE-2026-64597 in the Linux kernel.

Security

Fixed CVE-2026-64598 in the Linux kernel.

Security

Fixed CVE-2026-64604 in the Linux kernel.

Security

Fixed CVE-2026-68092 in the Linux kernel.

Security

Fixed CVE-2026-68093 in the Linux kernel.

Security

Fixed CVE-2026-68116 in the Linux kernel.

Security

Fixed CVE-2026-68119 in the Linux kernel.

Security

Fixed CVE-2026-68136 in the Linux kernel.

Security

Fixed CVE-2026-68139 in the Linux kernel.

Security

Fixed CVE-2026-68142 in the Linux kernel.

Security

Fixed CVE-2026-68145 in the Linux kernel.

Security

Fixed CVE-2026-68147 in the Linux kernel.

Security

Fixed CVE-2026-68149 in the Linux kernel.

Security

Fixed CVE-2026-68171 in the Linux kernel.

Security

Fixed CVE-2026-68184 in the Linux kernel.

Security

Fixed CVE-2026-68186 in the Linux kernel.

Security

Fixed CVE-2026-68187 in the Linux kernel.

Security

Fixed CVE-2026-68296 in the Linux kernel.

Security

Fixed CVE-2026-68299 in the Linux kernel.

Security

Fixed CVE-2026-68329 in the Linux kernel.

Security

Fixed CVE-2026-68336 in the Linux kernel.

Security

Fixed CVE-2026-68343 in the Linux kernel.

Security

Fixed CVE-2026-68386 in the Linux kernel.

Security

Fixed CVE-2026-68388 in the Linux kernel.

Security

Fixed CVE-2026-68396 in the Linux kernel.

Security

Fixed CVE-2026-68425 in the Linux kernel.

Security

Fixed CVE-2026-68428 in the Linux kernel.

Security

Fixed CVE-2026-68432 in the Linux kernel.

Security

Fixed CVE-2026-68442 in the Linux kernel.

Security

Fixed CVE-2026-68450 in the Linux kernel.

Change

Runtime sysctl changes:

Changed: net.ipv4.udp_mem: 188034 250715 376068 -> 188034 250714 376068

August 11, 2026

2026-08-11T00:00:00-07:00

Change

cos-129-19506-299-116

Kernel	Docker	Containerd	GPU Drivers
COS-6.12.94	v27.5.1	v2.2.6	See List

Fixed

Added kernel patch to reduce bcache garbage collection sleep interval to prevent I/O stalls.

Fixed

Fixed CVE-2026-33186 in google-guest-agent.

Security

Fixed CVE-2026-64227 in the Linux kernel.

Security

Fixed CVE-2026-64279 in the Linux kernel.

Security

Fixed CVE-2026-64286 in the Linux kernel.

Security

Fixed CVE-2026-64287 in the Linux kernel.

Security

Fixed CVE-2026-64352 in the Linux kernel.

Security

Fixed CVE-2026-64375 in the Linux kernel.

Security

Fixed CVE-2026-64401 in the Linux kernel.

Security

Fixed CVE-2026-64413 in the Linux kernel.

Security

Fixed CVE-2026-64416 in the Linux kernel.

Security

Fixed CVE-2026-64476 in the Linux kernel.

Security

Fixed CVE-2026-64508 in the Linux kernel.

Security

Fixed CVE-2026-64530 in the Linux kernel.

Security

Fixed CVE-2026-64532 in the Linux kernel.

Security

Fixed CVE-2026-64533 in the Linux kernel.

Security

Fixed CVE-2026-64534 in the Linux kernel.

Security

Fixed CVE-2026-64535 in the Linux kernel.

Security

Fixed CVE-2026-64538 in the Linux kernel.

Security

Fixed CVE-2026-64542 in the Linux kernel.

Security

Fixed CVE-2026-64545 in the Linux kernel.

Security

Fixed CVE-2026-64546 in the Linux kernel.

Security

Fixed CVE-2026-64548 in the Linux kernel.

Security

Fixed CVE-2026-64552 in the Linux kernel.

Security

Fixed CVE-2026-64554 in the Linux kernel.

Security

Fixed CVE-2026-64555 in the Linux kernel.

Security

Fixed KCTF-8173f7e in the Linux Kernel.

Change

Runtime sysctl changes:

Changed: net.ipv4.udp_mem: 188034 250714 376068 -> 188034 250715 376068

August 04, 2026

2026-08-04T00:00:00-07:00

Change

cos-129-19506-299-82

Kernel	Docker	Containerd	GPU Drivers
COS-6.12.94	v27.5.1	v2.2.6	See List

Change

Updated containerd to v2.2.6.

Change

cchost: Add bpf-lsm-policy for VM restrictions.

Security

Fixed CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, and CVE-2026-46598 in dev-go/crypto.

Security

Fixed CVE-2026-58470 in net-misc/wget.

Security

Fixed CVE-2026-59890 in dev-python/setuptools.

Security

Fixed CVE-2026-64244 in the Linux kernel.

Security

Fixed CVE-2026-64247 in the Linux kernel.

Security

Fixed CVE-2026-64253 in the Linux kernel.

Security

Fixed CVE-2026-64265 in the Linux kernel.

Security

Fixed CVE-2026-64266 in the Linux kernel.

Security

Fixed CVE-2026-64284 in the Linux kernel.

Security

Fixed CVE-2026-64289 in the Linux kernel.

Security

Fixed CVE-2026-64294 in the Linux kernel.

Security

Fixed CVE-2026-64298 in the Linux kernel.

Security

Fixed CVE-2026-64299 in the Linux kernel.

Security

Fixed CVE-2026-64306 in the Linux kernel.

Security

Fixed CVE-2026-64313 in the Linux kernel.

Security

Fixed CVE-2026-64317 in the Linux kernel.

Security

Fixed CVE-2026-64319 in the Linux kernel.

Security

Fixed CVE-2026-64320 in the Linux kernel.

Security

Fixed CVE-2026-64322 in the Linux kernel.

Security

Fixed CVE-2026-64323 in the Linux kernel.

Security

Fixed CVE-2026-64324 in the Linux kernel.

Security

Fixed CVE-2026-64326 in the Linux kernel.

Security

Fixed CVE-2026-64354 in the Linux kernel.

Security

Fixed CVE-2026-64355 in the Linux kernel.

Security

Fixed CVE-2026-64357 in the Linux kernel.

Security

Fixed CVE-2026-64368 in the Linux kernel.

Security

Fixed CVE-2026-64370 in the Linux kernel.

Security

Fixed CVE-2026-64373 in the Linux kernel.

Security

Fixed CVE-2026-64378 in the Linux kernel.

Security

Fixed CVE-2026-64379 in the Linux kernel.

Security

Fixed CVE-2026-64380 in the Linux kernel.

Security

Fixed CVE-2026-64381 in the Linux kernel.

Security

Fixed CVE-2026-64382 in the Linux kernel.

Security

Fixed CVE-2026-64383 in the Linux kernel.

Security

Fixed CVE-2026-64384 in the Linux kernel.

Security

Fixed CVE-2026-64385 in the Linux kernel.

Security

Fixed CVE-2026-64386 in the Linux kernel.

Security

Fixed CVE-2026-64387 in the Linux kernel.

Security

Fixed CVE-2026-64411 in the Linux kernel.

Security

Fixed CVE-2026-64412 in the Linux kernel.

Security

Fixed CVE-2026-64414 in the Linux kernel.

Security

Fixed CVE-2026-64415 in the Linux kernel.

Security

Fixed CVE-2026-64418 in the Linux kernel.

Security

Fixed CVE-2026-64422 in the Linux kernel.

Security

Fixed CVE-2026-64423 in the Linux kernel.

Security

Fixed CVE-2026-64425 in the Linux kernel.

Security

Fixed CVE-2026-64432 in the Linux kernel.

Security

Fixed CVE-2026-64435 in the Linux kernel.

Security

Fixed CVE-2026-64436 in the Linux kernel.

Security

Fixed CVE-2026-64448 in the Linux kernel.

Security

Fixed CVE-2026-64456 in the Linux kernel.

Security

Fixed CVE-2026-64473 in the Linux kernel.

Security

Fixed CVE-2026-64474 in the Linux kernel.

Security

Fixed CVE-2026-64475 in the Linux kernel.

Security

Fixed CVE-2026-64512 in the Linux kernel.

Security

Fixed CVE-2026-64514 in the Linux kernel.

Security

Fixed CVE-2026-64556 in the Linux kernel.

Security

Upgraded net-libs/nghttp2 to 1.69.0 and fixed CVE-2026-58055.

Change

Runtime sysctl changes:

Changed: net.ipv4.udp_mem: 188034 250715 376068 -> 188034 250714 376068

July 28, 2026

2026-07-28T00:00:00-07:00

Change

cos-129-19506-299-60

Kernel	Docker	Containerd	GPU Drivers
COS-6.12.94	v27.5.1	v2.2.5	See List

Fixed

Updated udev rule for protected_stateful_partition

Fixed

Upgraded app-admin/fluent-bit to v4.2.7.

Security

Fixed CVE-2026-29111 in sys-apps/systemd

Security

Fixed CVE-2026-3644 in dev-lang/python

Security

Fixed CVE-2026-40355 and CVE-2026-40356 in app-crypt/mit-krb5.

Security

Fixed CVE-2026-53381 in the Linux kernel.

Security

Fixed CVE-2026-53385 in the Linux kernel.

Security

Fixed CVE-2026-53388 in the Linux kernel.

Security

Fixed CVE-2026-53391 in the Linux kernel.

Security

Fixed CVE-2026-53392 in the Linux kernel.

Security

Fixed CVE-2026-53393 in the Linux kernel.

Security

Fixed CVE-2026-53394 in the Linux kernel.

Security

Fixed CVE-2026-53397 in the Linux kernel.

Security

Fixed CVE-2026-53398 in the Linux kernel.

Security

Fixed CVE-2026-53400 in the Linux kernel.

Security

Fixed CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, and CVE-2026-60002 in openssh.

Security

Fixed CVE-2026-6019 in dev-lang/python

Security

Fixed CVE-2026-63795 in the Linux kernel.

Security

Fixed CVE-2026-63800 in the Linux kernel.

Security

Fixed CVE-2026-63802 in the Linux kernel.

Security

Fixed CVE-2026-63806 in the Linux kernel.

Security

Fixed CVE-2026-63807 in the Linux kernel.

Security

Fixed CVE-2026-63809 in the Linux kernel.

Security

Fixed CVE-2026-63810 in the Linux kernel.

Security

Fixed CVE-2026-63823 in the Linux kernel.

Security

Fixed CVE-2026-63824 in the Linux kernel.

Security

Fixed CVE-2026-63827 in the Linux kernel.

Security

Fixed CVE-2026-63828 in the Linux kernel.

Security

Fixed CVE-2026-63829 in the Linux kernel.

Security

Fixed CVE-2026-63830 in the Linux kernel.

Security

Fixed CVE-2026-63833 in the Linux kernel.

Security

Fixed CVE-2026-64187 in the Linux kernel.

Security

Fixed CVE-2026-64189 in the Linux kernel.

July 20, 2026

2026-07-20T00:00:00-07:00

Change

cos-129-19506-299-36

Kernel	Docker	Containerd	GPU Drivers
COS-6.12.94	v27.5.1	v2.2.5	See List

Fixed

Fixed a bug in the XFS file system where direct I/O writes could use outdated block mappings during Copy-on-Write operations.

Fixed

Upgraded net-misc/curl to 8.21.0.

Security

Fixed CVE-2026-58013,CVE-2026-58014,CVE-2026-58015,CVE-2026-58016 in glib.

Security

Fixed CVE-2026-43216 in the Linux kernel.

Security

Fixed CVE-2026-58469, CVE-2026-58471, CVE-2026-58472 in net-misc/wget.

Security

Updated containerd to v2.2.5. This resolves CVE-2026-46680,CVE-2026-50195,CVE-2026-53492,CVE-2026-53488.

July 13, 2026

2026-07-13T00:00:00-07:00

Change

cos-129-19506-299-20

Kernel	Docker	Containerd	GPU Drivers
COS-6.12.94	v27.5.1	v2.2.3	See List

Feature

Enabled CONFIG_MEMORY_FAILURE in the Linux kernel for ARM64. This should improve memory errors handling when running CUDA workloads.

Fixed

Changed google-guest-agent's plugin installation path to /var/lib/google/guest-agent.

Fixed

Upgraded app-admin/fluent-bit to v4.2.6.

Fixed

Upgraded app-containers/docker-credential-helpers to v0.9.8.

Security

Fixed CVE-2026-40225 in sys-apps/systemd.

Security

Fixed CVE-2026-43010 in the Linux kernel.

Security

Fixed CVE-2026-53167 in the Linux kernel.

Security

Fixed CVE-2026-53341 in the Linux kernel.

Security

Fixed KCTF-736b380 in the Linux kernel.

July 09, 2026

2026-07-09T00:00:00-07:00

Change

cos-129-19506-299-8

Kernel	Docker	Containerd	GPU Drivers
COS-6.12.94	v27.5.1	v2.2.3	See List

Fixed

Added support for NVIDIA GRID driver version 580.159.03.

Security

Fixed CVE-2026-53359 in the Linux kernel.

July 06, 2026

2026-07-06T00:00:00-07:00

Change

cos-129-19506-299-3

Kernel	Docker	Containerd	GPU Drivers
COS-6.12.94	v27.5.1	v2.2.3	See List

Change

Updated the Linux kernel to v6.12.94. It resolves CVE-2026-52908,CVE-2026-52910, CVE-2026-52912,CVE-2026-52920, CVE-2026-52921,CVE-2026-52923, CVE-2026-52925,CVE-2026-52927,CVE-2026-52928,CVE-2026-52930, CVE-2026-52933,CVE-2026-52936, CVE-2026-52942,CVE-2026-52943, CVE-2026-52946,CVE-2026-52967, CVE-2026-52969,CVE-2026-52970, CVE-2026-52972,CVE-2026-52974, CVE-2026-52977,CVE-2026-52980, CVE-2026-52981,CVE-2026-52984, CVE-2026-52986,CVE-2026-52989, CVE-2026-52990,CVE-2026-52998, CVE-2026-52999,CVE-2026-53001, CVE-2026-53002,CVE-2026-53003, CVE-2026-53006,CVE-2026-53012, CVE-2026-53013,CVE-2026-53014, CVE-2026-53021,CVE-2026-53023, CVE-2026-53031,CVE-2026-53032, CVE-2026-53033,CVE-2026-53034, CVE-2026-53035,CVE-2026-53036, CVE-2026-53038,CVE-2026-53050, CVE-2026-53053,CVE-2026-53060, CVE-2026-53061,CVE-2026-53062, CVE-2026-53063,CVE-2026-53064, CVE-2026-53069,CVE-2026-53074, CVE-2026-53075,CVE-2026-53076, CVE-2026-53080,CVE-2026-53081, CVE-2026-53083,CVE-2026-53084, CVE-2026-53085,CVE-2026-53094, CVE-2026-53096,CVE-2026-53111, CVE-2026-53115,CVE-2026-53120, CVE-2026-53122,CVE-2026-53123, CVE-2026-53126,CVE-2026-53129, CVE-2026-53132.

Change

Updated the Linux kernel to v6.12.94. It resolves CVE-2026-52908,CVE-2026-52910, CVE-2026-52912,CVE-2026-52920, CVE-2026-52921,CVE-2026-52923, CVE-2026-52925,CVE-2026-52927, CVE-2026-52928,CVE-2026-52930, CVE-2026-52933,CVE-2026-52936, CVE-2026-52942,CVE-2026-52943, CVE-2026-52945,CVE-2026-52946, CVE-2026-52967,CVE-2026-52969, CVE-2026-52970,CVE-2026-52972, CVE-2026-52974,CVE-2026-52977, CVE-2026-52980,CVE-2026-52981, CVE-2026-52984,CVE-2026-52986, CVE-2026-52989,CVE-2026-52990, CVE-2026-52998,CVE-2026-52999, CVE-2026-53001,CVE-2026-53002, CVE-2026-53003,CVE-2026-53006, CVE-2026-53012,CVE-2026-53013, CVE-2026-53014,CVE-2026-53021, CVE-2026-53023,CVE-2026-53031, CVE-2026-53032,CVE-2026-53033, CVE-2026-53034,CVE-2026-53035, CVE-2026-53036,CVE-2026-53038, CVE-2026-53050,CVE-2026-53053, CVE-2026-53060,CVE-2026-53061, CVE-2026-53062,CVE-2026-53063, CVE-2026-53064,CVE-2026-53069, CVE-2026-53074,CVE-2026-53075, CVE-2026-53076,CVE-2026-53080, CVE-2026-53081,CVE-2026-53083, CVE-2026-53084,CVE-2026-53085, CVE-2026-53094,CVE-2026-53096, CVE-2026-53111,CVE-2026-53115, CVE-2026-53120,CVE-2026-53122, CVE-2026-53123,CVE-2026-53126, CVE-2026-53129,CVE-2026-53132.

Fixed

Upgraded app-admin/oslogin to v20260626.00.

Fixed

Upgraded dev-db/sqlite to v3.53.3.

Fixed

Upgraded dev-libs/expat to v2.8.2.

Fixed

Upgraded net-misc/socat to v1.8.1.3.

Fixed

Upgraded sys-apps/acl to v2.4.0.

Security

Fixed CVE-2026-35388 in net-misc/openssh.

Security

Fixed CVE-2026-40226 in sys-apps/systemd.

Security

Fixed CVE-2026-53122 in the Linux kernel.

Security

Fixed CVE-2026-53131 in the Linux kernel.

Security

Fixed CVE-2026-53134 in the Linux kernel.

Security

Fixed CVE-2026-53154 in the Linux kernel.

Security

Fixed CVE-2026-53156 in the Linux kernel.

Security

Fixed CVE-2026-53168 in the Linux kernel.

Security

Fixed CVE-2026-53180 in the Linux kernel.

Security

Fixed CVE-2026-53181 in the Linux kernel.

Security

Fixed CVE-2026-53184 in the Linux kernel.

Security

Fixed CVE-2026-53185 in the Linux kernel.

Security

Fixed CVE-2026-53189 in the Linux kernel.

Security

Fixed CVE-2026-53191 in the Linux kernel.

Security

Fixed CVE-2026-53199 in the Linux kernel.

Security

Fixed CVE-2026-53212 in the Linux kernel.

Security

Fixed CVE-2026-53214 in the Linux kernel.

Security

Fixed CVE-2026-53218 in the Linux kernel.

Security

Fixed CVE-2026-53219 in the Linux kernel.

Security

Fixed CVE-2026-53220 in the Linux kernel.

Security

Fixed CVE-2026-53223 in the Linux kernel.

Security

Fixed CVE-2026-53229 in the Linux kernel.

Security

Fixed CVE-2026-53230 in the Linux kernel.

Security

Fixed CVE-2026-53232 in the Linux kernel.

Security

Fixed CVE-2026-53235 in the Linux kernel.

Security

Fixed CVE-2026-53236 in the Linux kernel.

Security

Fixed CVE-2026-53239 in the Linux kernel.

Security

Fixed CVE-2026-53249 in the Linux kernel.

Security

Fixed CVE-2026-53261 in the Linux kernel.

Security

Fixed CVE-2026-53264 in the Linux kernel.

Security

Fixed CVE-2026-53265 in the Linux kernel.

Security

Fixed CVE-2026-53266 in the Linux kernel.

Security

Fixed CVE-2026-53267 in the Linux kernel.

Security

Fixed CVE-2026-53268 in the Linux kernel.

Security

Fixed CVE-2026-53269 in the Linux kernel.

Security

Fixed CVE-2026-53270 in the Linux kernel.

Security

Fixed CVE-2026-53275 in the Linux kernel.

June 29, 2026

2026-06-29T00:00:00-07:00

Change

cos-129-19506-224-80

Kernel	Docker	Containerd	GPU Drivers
COS-6.12.90	v27.5.1	v2.2.3	See List

Change

Updated cloud-provider-gcp to v35.0.8, docker-credential-gcr to v2.1.32, docker-credential-helpers to v0.9.7, nvidia-container-toolkit to v1.17.9, isa-l to v2.31.1, oauthlib to v3.0.2, apparmor-profiles to v3.1.7, apparmor to v3.1.7, ek-cpu-balloon to v1.2.3, libapparmor to v3.1.7.

Change

Updated gzip to v1.14_p20260502, xz-utils to v5.4.7, zstd to v1.5.7, mit-krb5 to v1.22.2, vim to v9.1.2148, vim-core to v9.1.2148, python-exec-conf to v2.4.10, libaio to v0.3.113, xxhash to v0.8.3, PySocks to v1.6.8, cryptography to v39.0.2, markupsafe to v2.1.5, pyrsistent to v0.14.11, python-magic to v0.4.27, pyyaml to v6.0.3, rfc3339-validator to v0.1.4, iptables to v1.8.13, mawk to v1.3.4_p20260302, lvm2 to v2.03.39, binutils-libs to v2.46.1, libxcrypt to v4.4.38, talloc to v2.4.4.

Change

Updated libtraceevent to v1.7.3, libtracefs to v1.6.4, conntrack-tools to v1.4.9, fuse to v2.9.9, fuse-common to v3.10.5.

Change

Updated sys-apps/casfs to v0.1.14.

Feature

Added cos-dkms support for vast client drivers v4.5.7.

Feature

Support nvidia-fs for COS GPU installer

Fixed

Upgraded app-admin/sosreport to v4.11.2.

Fixed

Upgraded app-shells/dash to v0.5.13.4-r2.

Fixed

Upgraded dev-libs/expat to v2.8.1.

Fixed

Upgraded net-misc/curl to v8.20.0-r1.

Fixed

Upgraded net-misc/rsync to v3.4.4.

Fixed

Upgraded sys-apps/gentoo-functions to v1.7.7.

Security

Fixed CVE-2026-11822, CVE-2026-11824 in dev-db/sqlite.

Security

Fixed CVE-2026-43116 in the Linux kernel.

Security

Fixed CVE-2026-45850 in the Linux kernel.

Security

Fixed CVE-2026-52908 in the Linux kernel.

Security

Fixed CVE-2026-52910 in the Linux kernel.

Security

Fixed CVE-2026-52912 in the Linux kernel.

Security

Fixed CVE-2026-52920 in the Linux kernel.

Security

Fixed CVE-2026-52921 in the Linux kernel.

Security

Fixed CVE-2026-52923 in the Linux kernel.

Security

Fixed CVE-2026-52925 in the Linux kernel.

Security

Fixed CVE-2026-52927 in the Linux kernel.

Security

Fixed CVE-2026-52930 in the Linux kernel.

Security

Fixed CVE-2026-52936 in the Linux kernel.

Security

Fixed CVE-2026-52942 in the Linux kernel.

Security

Fixed CVE-2026-52943 in the Linux kernel.

Security

Fixed CVE-2026-52969 in the Linux kernel.

Security

Fixed CVE-2026-52970 in the Linux kernel.

Security

Fixed CVE-2026-52974 in the Linux kernel.

Security

Fixed CVE-2026-52977 in the Linux kernel.

Security

Fixed CVE-2026-52980 in the Linux kernel.

Security

Fixed CVE-2026-52981 in the Linux kernel.

Security

Fixed CVE-2026-52984 in the Linux kernel.

Security

Fixed CVE-2026-52986 in the Linux kernel.

Security

Fixed CVE-2026-52989 in the Linux kernel.

Security

Fixed CVE-2026-52990 in the Linux kernel.

Security

Fixed CVE-2026-52998 in the Linux kernel.

Security

Fixed CVE-2026-52999 in the Linux kernel.

Security

Fixed CVE-2026-53001 in the Linux kernel.

Security

Fixed CVE-2026-53002 in the Linux kernel.

Security

Fixed CVE-2026-53003 in the Linux kernel.

Security

Fixed CVE-2026-53006 in the Linux kernel.

Security

Fixed CVE-2026-53012 in the Linux kernel.

Security

Fixed CVE-2026-53013 in the Linux kernel.

Security

Fixed CVE-2026-53014 in the Linux kernel.

Security

Fixed CVE-2026-53021 in the Linux kernel.

Security

Fixed CVE-2026-53023 in the Linux kernel.

Security

Fixed CVE-2026-53031 in the Linux kernel.

Security

Fixed CVE-2026-53032 in the Linux kernel.

Security

Fixed CVE-2026-53034 in the Linux kernel.

Security

Fixed CVE-2026-53035 in the Linux kernel.

Security

Fixed CVE-2026-53036 in the Linux kernel.

Security

Fixed CVE-2026-53050 in the Linux kernel.

Security

Fixed CVE-2026-53060 in the Linux kernel.

Security

Fixed CVE-2026-53062 in the Linux kernel.

Security

Fixed CVE-2026-53063 in the Linux kernel.

Security

Fixed CVE-2026-53064 in the Linux kernel.

Security

Fixed CVE-2026-53069 in the Linux kernel.

Security

Fixed CVE-2026-53074 in the Linux kernel.

Security

Fixed CVE-2026-53075 in the Linux kernel.

Security

Fixed CVE-2026-53076 in the Linux kernel.

Security

Fixed CVE-2026-53080 in the Linux kernel.

Security

Fixed CVE-2026-53083 in the Linux kernel.

Security

Fixed CVE-2026-53085 in the Linux kernel.

Security

Fixed CVE-2026-53094 in the Linux kernel.

Security

Fixed CVE-2026-53096 in the Linux kernel.

Security

Fixed CVE-2026-53111 in the Linux kernel.

Security

Fixed CVE-2026-53115 in the Linux kernel.

Security

Fixed CVE-2026-53120 in the Linux kernel.

Security

Fixed CVE-2026-53123 in the Linux kernel.

Security

Fixed CVE-2026-53126 in the Linux kernel.

Security

Fixed CVE-2026-53129 in the Linux kernel.

Security

Fixed CVE-2026-7210 in dev-lang/python.

Security

Upgraded dev-libs/openssl to v3.5.7 to fix CVE-2026-45447, CVE-2026-45445,CVE-2026-34183,CVE-2026-42764,CVE-2026-7383,CVE-2026-34180, CVE-2026-34182,CVE-2026-34181,CVE-2026-9076.

June 22, 2026

2026-06-22T00:00:00-07:00

Change

cos-129-19506-224-52

Kernel	Docker	Containerd	GPU Drivers
COS-6.12.90	v27.5.1	v2.2.3	See List

Announcement

Minor changes.

June 18, 2026

2026-06-18T00:00:00-07:00

Change

cos-129-19506-224-49

Kernel	Docker	Containerd	GPU Drivers
COS-6.12.90	v27.5.1	v2.2.3	See List

Change

Updated oslogin to v20260605.00.

Fixed

Upgraded app-admin/logrotate to v3.22.0-r1.

Fixed

Upgraded sys-apps/less to v704.

Security

Fix CVE-2026-41567 in app-containers/docker.

Security

Fix CVE-2026-41568 in app-containers/docker.

Security

Fix CVE-2026-42306 in app-containers/docker.

Security

Fixed CVE-2026-46160 in the Linux kernel.

Security

Fixed CVE-2026-46315 in the Linux kernel.

Security

Fixed CVE-2026-46321 in the Linux kernel.

Security

Fixed CVE-2026-46322 in the Linux kernel.

Security

Fixed CVE-2026-46323 in the Linux kernel.

Security

Fixed CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, and CVE-2026-47262 in app-containers/containerd.

June 15, 2026

2026-06-15T00:00:00-07:00

Change

cos-129-19506-224-36

Kernel	Docker	Containerd	GPU Drivers
COS-6.12.90	v27.5.1	v2.2.3	See List

Fixed

Upgraded app-admin/fluent-bit to v4.2.5.

Fixed

Upgraded cos-gpu-installer to v2.7.3.

Fixed

Upgraded sys-apps/less to v702.

Security

Fixed CVE-2025-71289 in the Linux kernel.

Security

Fixed CVE-2026-43245 in the Linux kernel.

Security

Fixed CVE-2026-43503 in the Linux kernel.

Security

Fixed CVE-2026-45838 in the Linux kernel.

Security

Fixed CVE-2026-45839 in the Linux kernel.

Security

Fixed CVE-2026-45841 in the Linux kernel.

Security

Fixed CVE-2026-45842 in the Linux kernel.

Security

Fixed CVE-2026-45843 in the Linux kernel.

Security

Fixed CVE-2026-45844 in the Linux kernel.

Security

Fixed CVE-2026-46243 in the Linux kernel.

Security

Fixed CVE-2026-46244 in the Linux kernel.

Security

Fixed CVE-2026-46274 in the Linux kernel.

Security

Fixed CVE-2026-46300 in the Linux kernel.

Security

Fixed CVE-2026-46316 in the Linux kernel.

Security

Fixed KCTF-def602e in the Linux kernel.

Security

Fixed KCTF-e5b31d9 in the Linux kernel.

Security

Updated dev-python/pyjwt to v2.13.0. This fixes CVE-2026-48522, CVE-2026-48524, CVE-2026-48525, CVE-2026-485256.

June 08, 2026

2026-06-08T00:00:00-07:00

Change

cos-129-19506-224-16

Kernel	Docker	Containerd	GPU Drivers
COS-6.12.90	v27.5.1	v2.2.3	See List

Change

Updated minijail to r188.

Security

Fixed CVE-2026-43303 in the Linux kernel.

June 01, 2026

2026-06-01T00:00:00-07:00

Change

cos-129-19506-224-7

Kernel	Docker	Containerd	GPU Drivers
COS-6.12.90	v27.5.1	v2.2.3	See List

Change

Runtime sysctl changes:

Changed: net.ipv4.udp_mem: 188034 250714 376068 -> 188034 250715 376068

Fixed

Added support for NVIDIA driver v580.159.04.

May 26, 2026

2026-05-26T00:00:00-07:00

Change

cos-129-19506-120-115

Kernel	Docker	Containerd	GPU Drivers
COS-6.12.77	v27.5.1	v2.2.3	See List

Announcement

This update contains several package upgrades to the latest patch version to ensure security, along with package patches for known CVEs.

Change

Added support for the swiotlb=any kernel command line parameter.

Change

Update sys-process/audit to v3.0.9.

Change

Updated glib to v2.86.5.

Change

Updated sys-libs/pam to v1.5.3.

Change

Upgraded net-misc/openssh to v10.0_p2.

Fixed

Fixed a crash that occurs when using the configfile or source GRUB2 commands when Secure Boot is enabled.

Fixed

Fixed a race condition triggered by ext4 online resize that rarely causes machines to fail to boot.

Fixed

Upgraded cos-gpu-installer to v2.7.2.

Security

Fixed CVE-2026-23171 in the Linux kernel.

Security

Fixed CVE-2026-31419 in the Linux kernel.

Security

Fixed CVE-2026-31430 in the Linux kernel.

Security

Fixed CVE-2026-31709 in the Linux kernel.

Security

Fixed CVE-2026-43074 in the Linux kernel.

Security

Fixed CVE-2026-43088 in the Linux kernel.

Security

Fixed CVE-2026-44431 in dev-python/urllib3.

Security

Fixed CVE-2026-6732 in dev-libs/libxml2.

Security

Fixed EFI variable OOB read in grub config parsing.

Security

Fixed KCTF-9e6bf14 in the Linux kernel.

Security

Updated dev-lang/go to 1.25.10. This fixes CVE-2026-32289,CVE-2026-32282,CVE-2026-32288,CVE-2026-27142,CVE-2025-61728,CVE-2026-27139,CVE-2026-39817,CVE-2026-39819,CVE-2025-68119,CVE-2025-61732,CVE-2026-32280,CVE-2026-25679,CVE-2026-27144,CVE-2026-32283,CVE-2026-27140,CVE-2025-61731,CVE-2026-32281,CVE-2025-61726,CVE-2025-68121,CVE-2026-27143,CVE-2026-39826,CVE-2026-39823,CVE-2026-39825,CVE-2026-33814,CVE-2026-39820,CVE-2026-42499,CVE-2026-39836.

Security

Updated net-misc/curl to v8.20. This fixes CVE-2026-5545,CVE-2026-4873,CVE-2026-6429,CVE-2026-7168,CVE-2026-6253,CVE-2026-6276,CVE-2026-7009,CVE-2026-5773.

May 21, 2026

2026-05-21T00:00:00-07:00

Change

cos-129-19506-120-97

Kernel	Docker	Containerd	GPU Drivers
COS-6.12.77	v27.5.1	v2.2.3	See List

Change

Switch cchost-* boards to legacy iptables.

Fixed

Added support for NVIDIA driver v535.309.01.

Fixed

Added support for NVIDIA driver v580.159.03.

Fixed

Added support for NVIDIA driver v595.71.05.

Fixed

Upgraded app-shells/dash to v0.5.13.4.

Fixed

Upgraded cos-gpu-installer to v2.7.1.

Fixed

Upgraded net-misc/rsync to v3.4.2.

Security

Fixed CVE-2025-38584 in the Linux kernel.

Security

Fixed CVE-2026-23473 in the Linux kernel.

Security

Fixed CVE-2026-43060 in the Linux kernel.

Security

Fixed CVE-2026-43063 in the Linux kernel.

Security

Fixed CVE-2026-43065 in the Linux kernel.

Security

Fixed CVE-2026-43066 in the Linux kernel.

Security

Fixed CVE-2026-43067 in the Linux kernel.

Security

Fixed CVE-2026-43068 in the Linux kernel.

Security

Fixed CVE-2026-43071 in the Linux kernel.

Security

Fixed CVE-2026-43073 in the Linux kernel.

Security

Fixed CVE-2026-43079 in the Linux kernel.

Security

Fixed CVE-2026-43085 in the Linux kernel.

Security

Fixed CVE-2026-43086 in the Linux kernel.

Security

Fixed CVE-2026-43089 in the Linux kernel.

Security

Fixed CVE-2026-43090 in the Linux kernel.

Security

Fixed CVE-2026-43091 in the Linux kernel.

Security

Fixed CVE-2026-43093 in the Linux kernel.

Security

Fixed CVE-2026-43094 in the Linux kernel.

Security

Fixed CVE-2026-43099 in the Linux kernel.

Security

Fixed CVE-2026-43107 in the Linux kernel.

Security

Fixed CVE-2026-43112 in the Linux kernel.

Security

Fixed CVE-2026-43114 in the Linux kernel.

Security

Fixed CVE-2026-43117 in the Linux kernel.

Security

Fixed CVE-2026-43329 in the Linux kernel.

Security

Fixed CVE-2026-43332 in the Linux kernel.

Security

Fixed CVE-2026-43333 in the Linux kernel.

Security

Fixed CVE-2026-43336 in the Linux kernel.

Security

Fixed CVE-2026-43338 in the Linux kernel.

Security

Fixed CVE-2026-43339 in the Linux kernel.

Security

Fixed CVE-2026-43341 in the Linux kernel.

Security

Fixed CVE-2026-43350 in the Linux kernel.

Security

Fixed CVE-2026-43359 in the Linux kernel.

Security

Fixed CVE-2026-43360 in the Linux kernel.

Security

Fixed CVE-2026-43361 in the Linux kernel.

Security

Fixed CVE-2026-43362 in the Linux kernel.

Security

Fixed CVE-2026-43363 in the Linux kernel.

Security

Fixed CVE-2026-43365 in the Linux kernel.

Security

Fixed CVE-2026-43366 in the Linux kernel.

Security

Fixed CVE-2026-43374 in the Linux kernel.

Security

Fixed CVE-2026-43383 in the Linux kernel.

Security

Fixed CVE-2026-43392 in the Linux kernel.

Security

Fixed CVE-2026-43393 in the Linux kernel.

Security

Fixed CVE-2026-43394 in the Linux kernel.

Security

Fixed CVE-2026-43403 in the Linux kernel.

Security

Fixed CVE-2026-43409 in the Linux kernel.

Security

Fixed CVE-2026-43438 in the Linux kernel.

Security

Fixed CVE-2026-43439 in the Linux kernel.

Security

Fixed CVE-2026-43441 in the Linux kernel.

Security

Fixed CVE-2026-43448 in the Linux kernel.

Security

Fixed CVE-2026-43449 in the Linux kernel.

Security

Fixed CVE-2026-43450 in the Linux kernel.

Security

Fixed CVE-2026-43451 in the Linux kernel.

Security

Fixed CVE-2026-43452 in the Linux kernel.

Security

Fixed CVE-2026-43453 in the Linux kernel.

Security

Fixed CVE-2026-43466 in the Linux kernel.

Security

Fixed CVE-2026-43469 in the Linux kernel.

Security

Fixed CVE-2026-43470 in the Linux kernel.

Security

Fixed CVE-2026-43472 in the Linux kernel.

Security

Fixed CVE-2026-43475 in the Linux kernel.

Security

Fixed CVE-2026-43482 in the Linux kernel.

Security

Fixed CVE-2026-43486 in the Linux kernel.

Security

Fixed CVE-2026-43487 in the Linux kernel.

Security

Fixed CVE-2026-46333 in the Linux kernel.

Security

Fixed argument injection in toolbox.

May 09, 2026

2026-05-09T00:00:00-07:00

Change

cos-beta-129-19506-120-64

Kernel	Docker	Containerd	GPU Drivers
COS-6.12.77	v27.5.1	v2.2.3	See List

Security

Fixed CVE-2026-43284 (dirtyfrag) in the Linux kernel.

Change

Apply hardening sysctls on cchost boards.

Change

Enabled mm hardening kernel cmdlines on cchost.

Security

Fixed CVE-2026-23255 in the Linux kernel.

Security

Fixed CVE-2026-23302 in the Linux kernel.

Security

Fixed CVE-2026-23458 in the Linux kernel.

Security

Fixed CVE-2026-31614 in the Linux kernel.

Security

Fixed CVE-2026-31694 in the Linux kernel.

Security

Fixed CVE-2026-31700 in the Linux kernel.

Security

Fixed CVE-2026-31708 in the Linux kernel.

Security

Fixed CVE-2026-31716 in the Linux kernel.

Security

Fixed CVE-2026-31733 in the Linux kernel.

Security

Fixed CVE-2026-31738 in the Linux kernel.

Security

Fixed CVE-2026-31752 in the Linux kernel.

Security

Fixed CVE-2026-31774 in the Linux kernel.

Security

Fixed CVE-2026-31781 in the Linux kernel.

Security

Fixed CVE-2026-35385 and CVE-2026-35386 in net-misc/openssh.

Security

Fixed CVE-2026-43012 in the Linux kernel.

Security

Fixed CVE-2026-43013 in the Linux kernel.

Security

Fixed CVE-2026-43016 in the Linux kernel.

Security

Fixed CVE-2026-43024 in the Linux kernel.

Security

Fixed CVE-2026-43026 in the Linux kernel.

Security

Fixed CVE-2026-43027 in the Linux kernel.

Security

Fixed CVE-2026-43028 in the Linux kernel.

Security

Fixed CVE-2026-43030 in the Linux kernel.

Security

Fixed CVE-2026-43035 in the Linux kernel.

Security

Fixed CVE-2026-43037 in the Linux kernel.

Security

Fixed CVE-2026-43038 in the Linux kernel.

Security

Fixed CVE-2026-43040 in the Linux kernel.

Security

Fixed CVE-2026-43043 in the Linux kernel.

Security

Fixed CVE-2026-43046 in the Linux kernel.

Security

Fixed CVE-2026-43054 in the Linux kernel.

Security

Fixed CVE-2026-43057 in the Linux kernel.

Security

Upgraded cos-gpu-installer to v2.6.8.

Security

Upgraded dev-libs/libgcrypt to v1.10.4 to fix CVE-2026-41989.