Correzioni delle vulnerabilità

L'upgrade di un cluster alla versione più recente di Google Distributed Cloud offre funzionalità e correzioni aggiuntive per il tuo cluster. Con ogni release di patch, correggiamo numerose vulnerabilità di sicurezza, il che rende ancora più importante l'upgrade alla versione della patch consigliata più recente. L'upgrade è una responsabilità condivisa tra Google e il cliente. Per ulteriori informazioni sulle responsabilità condivise, consulta Modello di responsabilità condivisa

Questa pagina è rivolta agli esperti della sicurezza che supportano la risoluzione di problemi di sicurezza o vulnerabilità che richiedono assistenza strategica, come incidenti e problemi riassegnati dall'assistenza. Per scoprire di più sui ruoli comuni e sulle attività di esempio a cui facciamo riferimento nei contenuti di Google Cloud , consulta Ruoli e attività comuni degli utenti GKE.

Come vengono classificate le vulnerabilità

Le vulnerabilità di sicurezza vengono solitamente identificate tramite il sistema Common Vulnerabilities and Exposures (CVE). Il team di sicurezza di GKE classifica le vulnerabilità in base al sistema di punteggio delle vulnerabilità di Kubernetes. Le classificazioni tengono conto di molti fattori, tra cui la configurazione e il rafforzamento della sicurezza di GKE e Google Distributed Cloud. A causa di questi fattori e degli investimenti che Google Cloud fa nella sicurezza, queste classificazioni delle vulnerabilità potrebbero differire da altre fonti di classificazione.

La tabella seguente descrive le categorie di gravità delle vulnerabilità:

Gravità Descrizione
Critico Una vulnerabilità facilmente sfruttabile in tutti i cluster da un utente malintenzionato remoto non autenticato che porta alla compromissione completa del sistema.
Alta Una vulnerabilità facilmente sfruttabile per molti cluster che comporta la perdita di riservatezza, integrità o disponibilità.
Media Una vulnerabilità sfruttabile per alcuni cluster in cui la perdita di riservatezza, integrità o disponibilità è limitata da configurazioni comuni, dalla difficoltà dell'exploit stesso, dall'accesso richiesto o dall'interazione dell'utente.
Bassa Tutte le altre vulnerabilità dei container. Lo sfruttamento è improbabile o le conseguenze dello sfruttamento sono limitate.

Bollettini sulla sicurezza

La maggior parte delle vulnerabilità viene corretta nelle versioni supportate di Google Distributed Cloud prima che possa essere sfruttata. Quando vengono segnalati incidenti che potrebbero compromettere la sicurezza dei tuoi cluster e dei tuoi dati, pubblichiamo bollettini sulla sicurezza. Un bollettino sulla sicurezza descrive il problema di sicurezza e il suo impatto e fornisce una mitigazione. Per ulteriori informazioni e un elenco dei bollettini pubblicati, consulta la pagina Bollettini sulla sicurezza.

Quando viene pubblicato un bollettino sulla sicurezza per una vulnerabilità che interessa Google Distributed Cloud (solo software) su VMware, pubblichiamo una nota di rilascio corrispondente con un link al bollettino.

Vulnerabilità corrette per versione della patch di Google Distributed Cloud

La tabella seguente elenca tutte le vulnerabilità che sono state corrette a partire da gennaio 2025. Per le correzioni precedenti, consulta le note di rilascio. Le correzioni nella tabella seguente sono elencate in base alla versione di release e alla gravità di Google Distributed Cloud:

Bassa Patch e gravità Vulnerabilità corrette

1,36

1.36.200-gke.118:
Gravità critica
N/D
1.36.200-gke.118:
Gravità alta
N/D
1.36.200-gke.118:
Container-Optimized OS
CVE-2026-64378, CVE-2026-70463, CVE-2026-53791, CVE-2026-53789, CVE-2026-70455, CVE-2026-53802, CVE-2026-53803, CVE-2026-70461, CVE-2026-60000, CVE-2026-53784, CVE-2026-53795, CVE-2026-70457, CVE-2026-60002, CVE-2026-59999
1.36.200-gke.118:
Ubuntu
N/D

1,36

1.36.100-gke.144:
Gravità critica
N/D
1.36.100-gke.144:
Gravità alta
N/D
1.36.100-gke.144:
Container-Optimized OS
CVE-2026-64352, CVE-2026-64385, CVE-2026-64448, CVE-2026-64368, CVE-2026-64382, CVE-2026-64375, CVE-2026-64266, CVE-2026-64247, CVE-2026-64279, CVE-2026-64387, CVE-2026-64383, CVE-2026-64423, CVE-2026-64412, CVE-2026-64435, CVE-2026-64319, CVE-2026-64411, CVE-2026-64322, CVE-2026-64379, CVE-2026-53400, CVE-2026-64313, CVE-2026-64380, CVE-2026-64299, CVE-2026-64355, CVE-2026-64381, CVE-2026-64386, CVE-2026-64317, CVE-2026-64413, CVE-2026-64384, CVE-2026-64401, CVE-2026-64324, CVE-2026-64436, CVE-2026-64422, CVE-2026-64298, CVE-2026-64323
1.36.100-gke.144:
Ubuntu
N/D
1.36.0-gke.532:
Gravità critica
CVE-2026-32316, CVE-2026-39979, CVE-2026-33947, CVE-2026-40164, CVE-2026-33948, CVE-2026-39956
1.36.0-gke.532:
Gravità alta
CVE-2019-14993, CVE-2026-34986, CVE-2021-39155, CVE-2026-42154, CVE-2021-39156, CVE-2026-39883, CVE-2026-42151, CVE-2022-23635, CVE-2023-4911, CVE-2026-24051, CVE-2026-41520, CVE-2026-26018, CVE-2026-35579, CVE-2026-33190, CVE-2025-47950, CVE-2026-32936, CVE-2025-58063, CVE-2026-26017, CVE-2026-33489, CVE-2026-32934, CVE-2026-58050, CVE-2024-36129, CVE-2026-49839, CVE-2024-25621, CVE-2026-32285, CVE-2026-46680, CVE-2026-53488, CVE-2022-28948, CVE-2026-35414, CVE-2026-27459, CVE-2026-35386, CVE-2026-35385, GHSA-537c-gmf6-5ccf, CVE-2026-3497, CVE-2026-26007
1.36.0-gke.532:
Container-Optimized OS
CVE-2026-58014, CVE-2026-46322, CVE-2026-12064, CVE-2026-11586, CVE-2026-6276, CVE-2026-53223, CVE-2026-8927, CVE-2026-31431, CVE-2026-58013, CVE-2026-29518, CVE-2026-40355, CVE-2026-53239, CVE-2026-34040, CVE-2026-53362, CVE-2026-9547, CVE-2026-45843, CVE-2026-31790, CVE-2026-11824, CVE-2026-28388, CVE-2026-53050, CVE-2026-11856, CVE-2026-58469, CVE-2026-9080, CVE-2026-58471, CVE-2026-52981, CVE-2026-52943, CVE-2026-53184, CVE-2026-46323, CVE-2026-58472, CVE-2026-10536, CVE-2026-53189, CVE-2026-8286, CVE-2026-46274, CVE-2026-31786, CVE-2026-53391, CVE-2026-58016, CVE-2026-48526, CVE-2026-53069, CVE-2026-63795, CVE-2026-46331, CVE-2026-53268, CVE-2026-45445, CVE-2026-52975, CVE-2026-46300, CVE-2026-52923, CVE-2026-7383, CVE-2026-53062, CVE-2026-53036, CVE-2026-9076, CVE-2026-53096, CVE-2026-31414, CVE-2026-53006, CVE-2026-52989, CVE-2026-28389, CVE-2026-52910, CVE-2026-11352, CVE-2026-53230, CVE-2026-52946, CVE-2026-11564, CVE-2026-46333, CVE-2026-43499, CVE-2026-63800, CVE-2026-52942, CVE-2026-52920, CVE-2026-53361, CVE-2026-9079, CVE-2026-52927, CVE-2026-33997, CVE-2026-53094, CVE-2026-52967, CVE-2026-11822, CVE-2026-40356, CVE-2026-52969, CVE-2026-53388, CVE-2026-63807, CVE-2026-52986, CVE-2026-63802, CVE-2026-6732, CVE-2026-53075, CVE-2025-70873, CVE-2026-4224, CVE-2026-45447, CVE-2026-8932, CVE-2026-53212, CVE-2026-8924, CVE-2026-3644, CVE-2026-58015, CVE-2026-53131, CVE-2026-43618, CVE-2026-53275, CVE-2026-52998, CVE-2026-43501, CVE-2026-63794, CVE-2026-53369, CVE-2026-53199, CVE-2026-46243, CVE-2026-43284, CVE-2026-53076, CVE-2026-46303, CVE-2026-46289, CVE-2026-53270, CVE-2026-9546, CVE-2026-53359, CVE-2026-52912, CVE-2026-46306, CVE-2026-41035, CVE-2026-35385, CVE-2026-53267, CVE-2026-34180, CVE-2026-31402, CVE-2026-53264, CVE-2026-46304, CVE-2026-46321, CVE-2026-5773, CVE-2026-52933, CVE-2026-53354, CVE-2026-52974, CVE-2026-43503, CVE-2026-53397, CVE-2026-34182, CVE-2026-9545, CVE-2026-53381, CVE-2026-53398, CVE-2026-53033, CVE-2026-53003, CVE-2026-8925, CVE-2026-53002, CVE-2025-13462, CVE-2026-46294, CVE-2026-52908, CVE-2026-45839, CVE-2026-53232, CVE-2026-28390, CVE-2026-0994, CVE-2026-8926, CVE-2026-52999, CVE-2026-28387, CVE-2026-53185, CVE-2026-53266
1.36.0-gke.532:
Ubuntu
Nessuno

1,35

1.35.600-gke.141:
Gravità critica
N/D
1.35.600-gke.141:
Gravità alta
N/D
1.35.600-gke.141:
Container-Optimized OS
CVE-2026-64378, CVE-2026-60002, CVE-2026-60000, CVE-2026-59999
1.35.600-gke.141:
Ubuntu
N/D
1.35.600-gke.140:
Gravità critica
N/D
1.35.600-gke.140:
Gravità alta
N/D
1.35.600-gke.140:
Container-Optimized OS
CVE-2026-64378, CVE-2026-60002, CVE-2026-60000, CVE-2026-59999
1.35.600-gke.140:
Ubuntu
N/D
1.35.500-gke.142:
Gravità critica
CVE-2019-8457
1.35.500-gke.142:
Gravità alta
CVE-2026-14456
1.35.500-gke.142:
Container-Optimized OS
CVE-2026-64375, CVE-2026-64313, CVE-2026-9079, CVE-2026-64413, CVE-2026-64380, CVE-2026-53388, CVE-2026-64379, CVE-2026-64317, CVE-2026-64322, CVE-2026-53398, CVE-2026-58472, CVE-2026-64382, CVE-2026-64298, CVE-2026-64385, CVE-2026-64387, CVE-2026-11564, CVE-2026-64324, CVE-2026-3644, CVE-2026-8286, CVE-2025-13462, CVE-2026-63795, CVE-2026-40356, CVE-2026-64352, CVE-2026-58469, CVE-2026-8924, CVE-2026-63807, CVE-2026-63794, CVE-2026-58471, CVE-2026-53381, CVE-2026-53400, CVE-2026-64323, CVE-2026-4224, CVE-2026-64266, CVE-2026-8927, CVE-2026-8932, CVE-2026-64368, CVE-2026-53391, CVE-2026-64247, CVE-2026-53397, CVE-2026-64435, CVE-2026-40355, CVE-2026-64412, CVE-2026-64422, CVE-2026-9546, CVE-2026-64448, CVE-2026-58015, CVE-2026-8926, CVE-2026-11352, CVE-2026-58016, CVE-2026-64384, CVE-2026-64383, CVE-2026-63800, CVE-2026-64319, CVE-2026-64279, CVE-2026-8925, CVE-2026-9545, CVE-2026-58014, CVE-2026-64411, CVE-2026-64401, CVE-2026-64423, CVE-2026-46331, CVE-2026-11856, CVE-2026-64381, CVE-2026-58013, CVE-2026-64436, CVE-2026-64600, CVE-2026-9080, CVE-2026-64355, CVE-2026-63802, CVE-2026-64299, CVE-2026-11586, CVE-2026-9547, CVE-2026-12064, CVE-2026-10536, CVE-2026-64386
1.35.500-gke.142:
Ubuntu
N/D
1.35.400-gke.81:
Gravità critica
N/D
1.35.400-gke.81:
Gravità alta
N/D
1.35.400-gke.81:
Container-Optimized OS
CVE-2026-53230, CVE-2026-6276, CVE-2026-46300, CVE-2026-45839, CVE-2026-43501, CVE-2026-43503, CVE-2026-43499, CVE-2026-7383, CVE-2026-48526, CVE-2026-11824, CVE-2026-46243, CVE-2026-34180, CVE-2026-45445, CVE-2026-34182, CVE-2026-45447, CVE-2026-6732, CVE-2026-9076, CVE-2026-11822, CVE-2026-45843, CVE-2026-46333, CVE-2026-53212, CVE-2026-5773, CVE-2026-53223
1.35.400-gke.81:
Ubuntu
N/D
1.35.300-gke.87:
Gravità critica
N/D
1.35.300-gke.87:
Gravità alta
N/D
1.35.300-gke.87:
Container-Optimized OS
N/D
1.35.300-gke.87:
Ubuntu
N/D
1.35.100-gke.72:
Gravità critica
N/D
1.35.100-gke.72:
Gravità alta
N/D
1.35.100-gke.72:
Container-Optimized OS
N/D
1.35.100-gke.72:
Ubuntu
N/D
1.35.0-gke.525:
Gravità critica
CVE-2025-14087, CVE-2024-45337
1.35.0-gke.525:
Gravità alta
CVE-2025-9230, CVE-2025-68156, CVE-2026-22801, CVE-2026-25646, CVE-2026-3104, CVE-2026-22695, CVE-2025-66293, CVE-2025-65018, CVE-2025-64720, CVE-2025-65637, CVE-2023-45142, CVE-2025-52565, GHSA-6g7g-w4f8-9c9x, CVE-2025-31133, CVE-2026-24049, CVE-2026-23949, CVE-2025-30204, CVE-2023-31484, CVE-2025-32988, CVE-2025-32990, CVE-2023-52425
1.35.0-gke.525:
Container-Optimized OS
CVE-2025-47273, CVE-2025-61725, CVE-2025-66418, CVE-2026-25679, CVE-2025-68121, CVE-2025-66471, CVE-2023-45142, CVE-2026-33748, CVE-2026-33747, CVE-2025-61732, CVE-2025-61726, CVE-2025-65637, CVE-2024-25621, CVE-2025-31133, CVE-2026-21441, CVE-2025-58188, CVE-2023-47108, CVE-2025-52881, CVE-2025-58187, CVE-2022-40897, CVE-2026-33186, CVE-2025-61729, CVE-2024-6345, CVE-2025-61723, CVE-2026-24051, CVE-2025-61731, CVE-2026-34986, CVE-2025-52565
1.35.0-gke.525:
Ubuntu
N/D

1,34

1.34.900-gke.135:
Gravità critica
N/D
1.34.900-gke.135:
Gravità alta
N/D
1.34.900-gke.135:
Container-Optimized OS
CVE-2026-64279, CVE-2026-64319, CVE-2026-53400, CVE-2026-64352, CVE-2026-64401, CVE-2026-64413, CVE-2026-64375
1.34.900-gke.135:
Ubuntu
N/D
1.34.800-gke.90:
Gravità critica
CVE-2026-50195, CVE-2026-53488, CVE-2026-53492
1.34.800-gke.90:
Gravità alta
CVE-2025-58063, CVE-2026-49839, CVE-2026-32316, CVE-2026-40164, CVE-2026-53489, CVE-2026-47262
1.34.800-gke.90:
Container-Optimized OS
CVE-2026-8925, CVE-2026-63795, CVE-2026-53239, CVE-2026-11564, CVE-2026-52920, CVE-2026-53230, CVE-2026-53062, CVE-2026-11352, CVE-2026-6276, CVE-2026-40355, CVE-2026-63802, CVE-2026-53267, CVE-2026-53268, CVE-2026-53096, CVE-2026-46300, CVE-2026-53033, CVE-2026-52927, CVE-2026-45839, CVE-2026-53050, CVE-2026-10536, CVE-2026-41035, CVE-2026-46289, CVE-2026-53003, CVE-2026-12064, CVE-2026-9079, CVE-2026-52974, CVE-2026-52933, CVE-2026-8926, CVE-2026-43501, CVE-2026-53006, CVE-2026-43503, CVE-2026-53232, CVE-2026-43499, CVE-2026-52967, CVE-2026-53036, CVE-2026-53076, CVE-2026-52912, CVE-2026-58013, CVE-2025-13462, CVE-2026-46321, CVE-2026-40356, CVE-2026-53185,
1.34.800-gke.90:
Ubuntu
N/D
1.34.700-gke.93:
Gravità critica
N/D
1.34.700-gke.93:
Gravità alta
CVE-2026-58050, CVE-2024-34158, CVE-2024-34156, CVE-2025-30204
1.34.700-gke.93:
Container-Optimized OS
N/D
1.34.700-gke.93:
Ubuntu
N/D
1.34.500-gke.108:
Gravità critica
N/D
1.34.500-gke.108:
Gravità alta
CVE-2021-39155, CVE-2022-23635, CVE-2021-39156, CVE-2019-14993, CVE-2026-4775, CVE-2026-1519, CVE-2026-5201, CVE-2022-28948
1.34.500-gke.108:
Container-Optimized OS
CVE-2026-31790, CVE-2026-31431, CVE-2026-28388, CVE-2026-34040, CVE-2026-0994, CVE-2026-28387, CVE-2026-28390, CVE-2026-28389, CVE-2025-70873
1.34.500-gke.108:
Ubuntu
N/D
1.34.400-gke.88:
Gravità critica
N/D
1.34.400-gke.88:
Gravità alta
CVE-2026-31790, CVE-2026-25075, CVE-2024-33599, CVE-2024-2961, CVE-2024-33601, CVE-2024-33602, CVE-2023-4911, CVE-2026-33636, CVE-2026-33416, CVE-2026-27137
1.34.400-gke.88:
Container-Optimized OS
CVE-2025-47273, CVE-2026-27140, CVE-2025-61725, CVE-2025-66418, CVE-2026-25679, CVE-2025-68121, CVE-2025-66471, CVE-2023-45142, CVE-2026-33748, CVE-2026-27144, CVE-2026-32281, CVE-2026-33747, CVE-2025-61732, CVE-2025-61726, CVE-2025-65637, CVE-2024-25621, CVE-2025-31133, CVE-2026-21441, CVE-2025-58188, CVE-2023-47108, CVE-2025-52881, CVE-2026-39883, CVE-2025-58187, CVE-2022-40897, CVE-2026-32280, CVE-2026-33186, CVE-2025-61729, CVE-2026-32283, CVE-2024-6345, CVE-2025-61723, CVE-2026-24051, CVE-2025-61731, CVE-2026-27143, CVE-2026-34986, CVE-2025-52565
1.34.400-gke.88:
Ubuntu
N/D
1.34.300-gke.59:
Gravità critica
N/D
1.34.300-gke.59:
Gravità alta
CVE-2026-25646, CVE-2026-22695, CVE-2026-22801
1.34.300-gke.59:
Container-Optimized OS
N/D
1.34.300-gke.59:
Ubuntu
N/D
1.34.200-gke.68:
Gravità critica
N/D
1.34.200-gke.68:
Gravità alta
N/D
1.34.200-gke.68:
Container-Optimized OS
CVE-2025-65637
1.34.200-gke.68:
Ubuntu
N/D
1.34.100-gke.93:
Gravità critica
N/D
1.34.100-gke.93:
Gravità alta
N/D
1.34.100-gke.93:
Container-Optimized OS
N/D
1.34.100-gke.93:
Ubuntu
N/D
1.34.0-gke.566:
Gravità critica
CVE-2020-16156, CVE-2021-3997, CVE-2022-1304, CVE-2023-4641, CVE-2024-0727, CVE-2024-13176, CVE-2024-24790, CVE-2024-2511, CVE-2024-4741, CVE-2024-52533, CVE-2024-5535, CVE-2024-56171, CVE-2025-0395, CVE-2025-54349
1.34.0-gke.566:
Gravità alta
CVE-2018-12886, CVE-2019-12290, CVE-2019-3843, CVE-2019-3844, CVE-2020-1751, CVE-2020-29652, CVE-2021-3121, CVE-2021-33194, CVE-2021-38561, CVE-2021-43565, CVE-2022-21698, CVE-2022-27191, CVE-2022-27664, CVE-2022-32149, CVE-2022-41723, CVE-2022-49043, CVE-2023-29491, CVE-2023-39325, CVE-2023-45285, CVE-2023-50387, CVE-2023-50868, CVE-2023-52356, CVE-2024-0553, CVE-2024-25062, CVE-2024-2961, CVE-2024-33599, CVE-2024-33601, CVE-2024-33602, CVE-2024-7006, CVE-2025-24928, CVE-2025-27113, CVE-2025-27363, CVE-2025-32414, CVE-2025-32415, CVE-2025-48060, CVE-2025-58060, CVE-2025-59530
1.34.0-gke.566:
Container-Optimized OS
CVE-2021-33503, CVE-2021-33503, CVE-2023-43804, CVE-2023-50782, CVE-2024-45337, CVE-2024-52533, CVE-2024-56201, CVE-2024-6174, CVE-2025-11082, CVE-2025-11083, CVE-2025-22868, CVE-2025-22869, CVE-2025-27516, CVE-2025-27614, CVE-2025-30204, CVE-2025-48384, CVE-2025-48385, CVE-2025-6052, CVE-2025-7545, CVE-2025-7546
1.34.0-gke.566:
Ubuntu
N/D

Per ulteriori informazioni sulle correzioni e sulle modifiche per una determinata release, consulta le note di rilascio.