You can see the latest product updates for all of Google Cloud on the
[Google Cloud](https://docs.cloud.google.com/release-notes.md.txt) page, browse and filter all release notes in the
[Google Cloud console](https://console.cloud.google.com/release-notes),
or programmatically access release notes in
[BigQuery](https://console.cloud.google.com/bigquery?p=bigquery-public-data&d=google_cloud_release_notes&t=release_notes&page=table).

To get the latest product updates delivered to you, add the URL of this page to your
[feed
reader](https://wikipedia.org/wiki/Comparison_of_feed_aggregators), or add the
[feed URL](https://docs.cloud.google.com/feeds/cos-125-release-notes.xml) directly.

## November 11, 2026

Change

### cos-125-19216-801-29

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.114](https://cos.googlesource.com/third_party/kernel/+/1dcdbc3f0dcd16137863cab1347dee8c604b87c0) | v27.5.1 | v2.2.7 | [See List](https://storage.googleapis.com/cos-tools/19216.801.29/lakitu/gpu_driver_versions.textproto) |

Feature Added suppport for lustre-client-driver 2.16 in
new lustre package lustre-client-drivers-2_16.
Security Fixed CVE-2024-25621 in cri-tools.
Security Fixed CVE-2025-52565 in nvidia-container-toolkit.
Security Fixed CVE-2026-103111 in dev-libs/libpcre.
Security Fixed CVE-2026-106583 in net-misc/openssh.
Security Fixed CVE-2026-119196 in dev-python/pyasn1.
Security Fixed CVE-2026-15146 in net-misc/wget.
Security Fixed CVE-2026-30922 in dev-python/pyasn1.
Security Fixed CVE-2026-33747 in docker.
Security Fixed CVE-2026-44973 in google-osconfig-agent.
Security Fixed CVE-2026-78663, CVE-2026-97031 in dev-lang/go.
Security Fixed CVE-2026-84304 in cos-extensions.

## November 06, 2026

Change

### cos-125-19216-801-14

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.114](https://cos.googlesource.com/third_party/kernel/+/1dcdbc3f0dcd16137863cab1347dee8c604b87c0) | v27.5.1 | v2.2.7 | [See List](https://storage.googleapis.com/cos-tools/19216.801.14/lakitu/gpu_driver_versions.textproto) |

Announcement This is an [LTS Refresh release.](https://docs.cloud.google.com/container-optimized-os/docs/concepts/versioning.md.txt#lts_refresh_releases)
Feature Added RTC support in A4X-Max images.
Feature Enabled PCI peer to peer direct memory access for 64k kernels.
Fixed Fixed a 60 second outage after an idpf function reset on IPU E2100 caused by misreading PFGEN_RSTAT.
Fixed Updated cos-gpu-installer to v2.7.12. It installs ucodes firmwares for r615 and newer GPU driver versions.
Fixed Upgraded app-arch/gzip to v1.15.
Fixed Upgraded app-containers/docker-credential-helpers to v0.9.12.
Fixed Upgraded app-misc/ca-certificates to v20260816.3.131.1.
Fixed Upgraded dev-db/sqlite to v3.54.1.
Fixed Upgraded dev-libs/nss to v3.132.
Fixed Upgraded sys-apps/less to v710.
Fixed Upgraded sys-libs/timezone-data to v2026f.
Security Fixed CVE-2025-31133 in cri-tools.
Security Fixed CVE-2025-52565 in docker.
Security Fixed CVE-2025-52881 in cri-tools.
Security Fixed CVE-2026-116587 in google-osconfig-agent.
Security Fixed CVE-2026-32285 in cni-plugins.
Security Fixed CVE-2026-32285 in cri-tools.
Security Fixed CVE-2026-63209 in containerd.
Security Fixed CVE-2026-63209 in node-problem-detector.
Security Fixed CVE-2026-63209, CVE-2026-39883, CVE-2024-25621 in google-osconfig-agent.
Security Fixed CVE-2026-84304 in containerd.
Security Fixed CVE-2026-84304 in docker.
Security Fixed CVE-2026-84304 in google-guest-agent.
Security Fixed CVE-2026-84304, CVE-2026-29181 in node-problem-detector.
Security Fixed CVE-2026-84445, CVE-2026-116587 in cos-extensions.
Security Fixed CVE-2026-84445, CVE-2026-63209 in docker.
Security Updated curl to v8.22.0. This resolves CVE-2026-18924, CVE-2026-13608, CVE-2026-80229, CVE-2026-80255 and CVE-2026-19931.
Security Updated libpcre2 to v10.49. This resolves CVE-2026-86145
and CVE-2026-103111.
Security Updated pyjwt to v2.14.0. This resolves CVE-2026-102266, CVE-2026-102267, CVE-2026-102268 and CVE-2026-102271.

## October 30, 2026

Change

### cos-125-19216-760-32

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.113](https://cos.googlesource.com/third_party/kernel/+/44bf8b7767ac63010cad3d8a3afa241b262193de) | v27.5.1 | v2.2.7 | [See List](https://storage.googleapis.com/cos-tools/19216.760.32/lakitu/gpu_driver_versions.textproto) |

Fixed Fixed an IDPF bug that could cause indefinite IPv4 route loss after a hard NIC reset.
Security Fixed CVE-2024-41110, CVE-2026-33186 in cri-tools.
Security Fixed CVE-2026-33186 in cni-plugins.
Security Fixed CVE-2026-33186 in containerd.
Security Fixed CVE-2026-33186 in guest-agent.
Security Fixed CVE-2026-39832, CVE-2026-33186, CVE-2026-46595, CVE-2026-39831 in docker.
Security Fixed CVE-2026-39834, CVE-2026-39831 in google-osconfig-agent.
Security Fixed CVE-2026-77214 in dev-libs/expat.
Security Fixed KCTF-d095321 in the Linux kernel.
Security Updated app-arch/brotli to 1.0.10. This resolves CVE-2026-111497.

## October 27, 2026

Change

### cos-125-19216-760-20

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.113](https://cos.googlesource.com/third_party/kernel/+/c0c0e54972faeecef0eb8728e9c1d6291f4f7dee) | v27.5.1 | v2.2.7 | [See List](https://storage.googleapis.com/cos-tools/19216.760.20/lakitu/gpu_driver_versions.textproto) |

Change Updated app-admin/google-guest-configs to v20261025.00.
Security Fixed CVE-2026-33186 in google-osconfig-agent.
Security Fixed CVE-2026-82474 in app-admin/sudo.
Change Runtime sysctl changes:

- Changed: fs.epoll.max_user_watches: 1808562 -\> 1808517
- Changed: fs.fanotify.max_user_marks: 68416 -\> 68412
- Changed: fs.inotify.max_user_watches: 64192 -\> 64189
- Changed: kernel.threads-max: 63183 -\> 63178
- Changed: net.ipv4.tcp_mem: 94020 125361 188040 -\> 94017 125357 188034
- Changed: net.ipv4.udp_mem: 188040 250722 376080 -\> 188034 250715 376068
- Changed: user.max_cgroup_namespaces: 31591 -\> 31589
- Changed: user.max_fanotify_marks: 68416 -\> 68412
- Changed: user.max_inotify_watches: 64192 -\> 64189
- Changed: user.max_ipc_namespaces: 31591 -\> 31589
- Changed: user.max_mnt_namespaces: 31591 -\> 31589
- Changed: user.max_net_namespaces: 31591 -\> 31589
- Changed: user.max_pid_namespaces: 31591 -\> 31589
- Changed: user.max_time_namespaces: 31591 -\> 31589
- Changed: user.max_user_namespaces: 31591 -\> 31589
- Changed: user.max_uts_namespaces: 31591 -\> 31589

<br />

## October 22, 2026

Change

### cos-125-19216-760-8

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.113](https://cos.googlesource.com/third_party/kernel/+/bac32aa947d1d7d52552c51d3bd2f355ecc21464) | v27.5.1 | v2.2.7 | [See List](https://storage.googleapis.com/cos-tools/19216.760.8/lakitu/gpu_driver_versions.textproto) |

Announcement This is an [LTS Refresh release.](https://docs.cloud.google.com/container-optimized-os/docs/concepts/versioning.md.txt#lts_refresh_releases)
Fixed Updated cos-gpu-installer to v2.7.11 and toolbox to v20261020.
Fixed Upgraded app-misc/ca-certificates to v20260816.3.125. This removes the certificates affected by the eMudhra intermediate certificate compromise.
Fixed Upgraded dev-libs/nss to v3.131.1. This removes the certificates affected by the eMudhra intermediate certificate compromise.
Security Fixed CVE-2026-111943 in dev-lang/go.
Security Fixed CVE-2026-39831 in guest-agent.
Security Fixed CVE-2026-39831 in node-problem-detector.
Security Fixed CVE-2026-39832, CVE-2026-39831 in cos-extensions.
Security Fixed CVE-2026-39833 in nvidia-container-toolkit.
Security Fixed CVE-2026-39833, CVE-2024-28180, CVE-2025-11065, CVE-2026-25680, CVE-2025-47914, GHSA-w67g-5rqw-f597, CVE-2026-84304, GHSA-fv92-fjc5-jj9h, CVE-2023-47108, CVE-2024-51744, CVE-2026-35469, CVE-2025-65637, CVE-2025-30204, CVE-2024-45337, CVE-2025-52565, CVE-2026-42508, CVE-2026-46598, CVE-2023-45142, CVE-2024-45310, CVE-2026-39830, CVE-2026-41579, CVE-2026-46595, CVE-2024-24786, CVE-2026-39832, CVE-2026-10722, CVE-2026-39831, CVE-2025-22869 in kubernetes.
Security Fixed CVE-2026-42508, CVE-2026-46595 in cri-tools.
Security Fixed CVE-2026-46595 in google-guest-agent.
Security Fixed CVE-2026-46595, CVE-2026-42508 in google-osconfig-agent.
Security Fixed CVE-2026-98432 in the Linux kernel.

## October 19, 2026

Change

### cos-125-19216-739-16

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.112](https://cos.googlesource.com/third_party/kernel/+/d70e5f8042c76c3a2b0c640806692e13ddae3ecf) | v27.5.1 | v2.2.7 | [See List](https://storage.googleapis.com/cos-tools/19216.739.16/lakitu/gpu_driver_versions.textproto) |

Fixed Added support for loading the pci-pf-stub module.
Fixed Fix docker cp failure when copying to/from containers with nested bind mounts.
Fixed Upgraded app-editors/vim to v9.2.1125, Upgraded app-editors/vim-core to v9.2.1125.
Security Fix CVE-2026-19445 by upgrading to python 3.11.17.
Security Fixed CVE-2026-5435 in sys-libs/glibc.
Security Fixed CVE-2026-99999 in the Linux kernel.
Change Runtime sysctl changes:

- Changed: fs.epoll.max_user_watches: 1808517 -\> 1808562
- Changed: fs.fanotify.max_user_marks: 68412 -\> 68416
- Changed: fs.inotify.max_user_watches: 64189 -\> 64192
- Changed: kernel.threads-max: 63178 -\> 63183
- Changed: net.ipv4.tcp_mem: 94017 125357 188034 -\> 94020 125361 188040
- Changed: net.ipv4.udp_mem: 188034 250715 376068 -\> 188040 250722 376080
- Changed: user.max_cgroup_namespaces: 31589 -\> 31591
- Changed: user.max_fanotify_marks: 68412 -\> 68416
- Changed: user.max_inotify_watches: 64189 -\> 64192
- Changed: user.max_ipc_namespaces: 31589 -\> 31591
- Changed: user.max_mnt_namespaces: 31589 -\> 31591
- Changed: user.max_net_namespaces: 31589 -\> 31591
- Changed: user.max_pid_namespaces: 31589 -\> 31591
- Changed: user.max_time_namespaces: 31589 -\> 31591
- Changed: user.max_user_namespaces: 31589 -\> 31591
- Changed: user.max_uts_namespaces: 31589 -\> 31591

<br />

## October 12, 2026

Change

### cos-125-19216-739-5

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.112](https://cos.googlesource.com/third_party/kernel/+/91e56902b9c6999dabbff541fd5baf20aee3108b) | v27.5.1 | v2.2.7 | [See List](https://storage.googleapis.com/cos-tools/19216.739.5/lakitu/gpu_driver_versions.textproto) |

Announcement This is an [LTS Refresh release.](https://docs.cloud.google.com/container-optimized-os/docs/concepts/versioning.md.txt#lts_refresh_releases)
Fixed Added support for lustre v2.14.0_p262-r1
Security Fixed CVE-2026-18220 in sys-libs/binutils-libs.
Security Fixed CVE-2026-5450 in sys-libs/glibc.
Security Patch CVE-2026-49264, CVE-2026-49265 on dev-python/oauthlib.

## October 06, 2026

Change

### cos-125-19216-700-23

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.110](https://cos.googlesource.com/third_party/kernel/+/016be3984fda059a05c980c7133651fec7536d1c) | v27.5.1 | v2.2.7 | [See List](https://storage.googleapis.com/cos-tools/19216.700.23/lakitu/gpu_driver_versions.textproto) |

Change Updated dev-libs/openssl to v3.5.9.
Fixed Added support for net-fs/lustre-client-drivers v2.14.0_p262.
Fixed Added the "watchdog_timeout" module parameter to the idpf driver.
Fixed Upgraded app-admin/google-guest-configs to v20260928.00.
Fixed Upgraded dev-libs/expat to v2.8.5.
Fixed Upgraded sys-apps/xemu to v0.0.11.
Fixed Upgraded sys-process/lsof to v4.99.7.
Security Fixed CVE-2026-5928 in sys-libs/glibc.
Security Upgraded dev-libs/libxml2 to v2.15.4. This fixes CVE-2026-86140.
Change Runtime sysctl changes:

- Changed: net.ipv4.udp_mem: 188034 250714 376068 -\> 188034 250715 376068

<br />

## September 28, 2026

Change

### cos-125-19216-700-7

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.110](https://cos.googlesource.com/third_party/kernel/+/393cf3f7db2dfb458f3f1513e7eb6ef3a81930ba) | v27.5.1 | v2.2.7 | [See List](https://storage.googleapis.com/cos-tools/19216.700.7/lakitu/gpu_driver_versions.textproto) |

Announcement This is an [LTS Refresh release.](https://docs.cloud.google.com/container-optimized-os/docs/concepts/versioning.md.txt#lts_refresh_releases)
Change Ensure time sync prior to TLS handshake.
Fixed Added support for bare metal TPUs.
Change Runtime sysctl changes:

- Changed: net.ipv4.udp_mem: 188034 250715 376068 -\> 188034 250714 376068

<br />

## September 21, 2026

Change

### cos-125-19216-655-40

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.105](https://cos.googlesource.com/third_party/kernel/+/1133af89a76cd21b91110351a353e7300d39c96b) | v27.5.1 | v2.2.7 | [See List](https://storage.googleapis.com/cos-tools/19216.655.40/lakitu/gpu_driver_versions.textproto) |

Feature Added support for loading the CephFS kernel driver.
Fixed Fixed an issue where temporary efivarfs mounts under /tmp could persist after boot.
Fixed Upgraded app-arch/bzip2 to v1.0.8-r5.
Fixed Upgraded app-shells/dash to v0.5.13.5.
Security Fixed CVE-2026-0864 in dev-lang/python.
Security Fixed CVE-2026-15308 in dev-lang/python.
Security Upgraded net-misc/rsync to version 3.5.0. This fixes CVE-2026-53791, CVE-2026-53784, CVE-2026-53786, CVE-2026-53789, CVE-2026-53795, CVE-2026-53797, CVE-2026-53798, CVE-2026-53799, CVE-2026-53800, CVE-2026-53801, CVE-2026-53802, CVE-2026-53803, CVE-2026-70455, CVE-2026-70457, CVE-2026-70459, CVE-2026-70461, and CVE-2026-70463.

## September 17, 2026

Change

### cos-125-19216-655-28

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.105](https://cos.googlesource.com/third_party/kernel/+/8b85c09213b2044542f81eae6f4b12adafdf848e) | v27.5.1 | v2.2.7 | [See List](https://storage.googleapis.com/cos-tools/19216.655.28/lakitu/gpu_driver_versions.textproto) |

Feature Fixed a performance issue in the GVE driver on multi-NUMA systems.
Fixed Upgraded net-libs/libnftnl to v1.2.9.
Security Fixed CVE-2026-80590 in the Linux kernel.
Security Fixed CVE-2026-80737 in the Linux kernel.
Security Fixed CVE-2026-80788 in the Linux kernel.
Security Fixed CVE-2026-80789 in the Linux kernel.
Security Fixed CVE-2026-80791 in the Linux kernel.
Security Fixed CVE-2026-80792 in the Linux kernel.
Security Fixed CVE-2026-80793 in the Linux kernel.
Security Fixed CVE-2026-80805 in the Linux kernel.
Security Fixed CVE-2026-80806 in the Linux kernel.
Security Fixed CVE-2026-80808 in the Linux kernel.
Security Fixed CVE-2026-80837 in the Linux kernel.
Security Fixed CVE-2026-80838 in the Linux kernel.
Security Fixed CVE-2026-80839 in the Linux kernel.
Security Fixed CVE-2026-80842 in the Linux kernel.
Security Fixed CVE-2026-80843 in the Linux kernel.
Security Fixed CVE-2026-80845 in the Linux kernel.
Security Fixed CVE-2026-80852 in the Linux kernel.
Security Fixed CVE-2026-80854 in the Linux kernel.
Security Fixed CVE-2026-80855 in the Linux kernel.
Security Fixed CVE-2026-80856 in the Linux kernel.
Security Fixed CVE-2026-80862 in the Linux kernel.
Security Fixed CVE-2026-80916 in the Linux kernel.
Security Fixed CVE-2026-80917 in the Linux kernel.
Change Runtime sysctl changes:

- Changed: net.ipv4.udp_mem: 188034 250714 376068 -\> 188034 250715 376068

<br />

## September 08, 2026

Change

### cos-125-19216-655-12

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.105](https://cos.googlesource.com/third_party/kernel/+/728af8e16745d2a2cef9323806e50619cc900208) | v27.5.1 | v2.2.7 | [See List](https://storage.googleapis.com/cos-tools/19216.655.12/lakitu/gpu_driver_versions.textproto) |

Fixed Added support for NVIDIA driver v595.91.07.
Fixed Fixed docker cp failure when copying to/from containers with symlinked bind mounts.
Fixed Upgraded dev-db/sqlite to v3.53.4.
Security Fixed CVE-2026-6238 in sys-libs/glibc.
Security Updated dev-go/net to v0.55.0 to fix CVE-2026-25680.
Change Runtime sysctl changes:

- Changed: net.ipv4.udp_mem: 188034 250715 376068 -\> 188034 250714 376068

<br />

## August 31, 2026

Change

### cos-125-19216-655-6

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.105](https://cos.googlesource.com/third_party/kernel/+/728af8e16745d2a2cef9323806e50619cc900208) | v27.5.1 | v2.2.7 | [See List](https://storage.googleapis.com/cos-tools/19216.655.6/lakitu/gpu_driver_versions.textproto) |

Fixed LTS Refresh from main-R125-cos-6.12 to release-R125-cos-6.12
Fixed Upgraded app-arch/zstd to v1.5.7-r1.
Fixed Upgraded app-containers/cni-plugins to v1.9.1.
Fixed Upgraded dev-libs/libverto to v0.3.2-r1.
Fixed Upgraded dev-libs/popt to v1.19-r1.
Fixed Upgraded dev-libs/xxhash to v0.8.3-r2.
Fixed Upgraded sys-auth/passwdqc to v2.0.3-r1.
Security Fixed CVE-2026-68293 in the Linux kernel.
Security Upgraded dev-libs/libxml2 to v2.15.3. This fixes CVE-2026-0989, CVE-2026-0990, and CVE-2026-0992.
Change Runtime sysctl changes:

- Changed: net.ipv4.udp_mem: 188034 250714 376068 -\> 188034 250715 376068

<br />

## August 24, 2026

Change

### cos-125-19216-532-135

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.94](https://cos.googlesource.com/third_party/kernel/+/ee59a4a73fdc4a0b29499e5a8625446f6c566f1e) | v27.5.1 | v2.2.7 | [See List](https://storage.googleapis.com/cos-tools/19216.532.135/lakitu/gpu_driver_versions.textproto) |

Change Updated cos-gpu-installer to v2.7.7.
Fixed Added support for net-fs/lustre-client-drivers v2.14.0_p259.
Fixed Upgraded sys-apps/xemu to v0.0.10.
Security Fixed CVE-2026-68093 in the Linux kernel.
Security Fixed CVE-2026-68096 in the Linux kernel.
Security Fixed CVE-2026-68096 in the Linux kernel.
Security Fixed CVE-2026-68096 in the Linux kernel.
Security Fixed CVE-2026-68129 in the linux kernel
Security Fixed CVE-2026-68296 in the Linux kernel.
Security Fixed CVE-2026-68386 in the Linux kernel.
Security Fixed KCTF-0650f1c in the Linux Kernel.
Change Runtime sysctl changes:

- Changed: net.ipv4.udp_mem: 188034 250715 376068 -\> 188034 250714 376068

<br />

## August 20, 2026

Change

### cos-125-19216-532-123

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.94](https://cos.googlesource.com/third_party/kernel/+/1a752fac9475f0905bc7fd710d7f3d21e08f67ff) | v27.5.1 | v2.2.7 | [See List](https://storage.googleapis.com/cos-tools/19216.532.123/lakitu/gpu_driver_versions.textproto) |

Change Updated containerd to v2.2.7.
Security Fixed CVE-2026-68329 in the Linux kernel.

## August 19, 2026

Change

### cos-125-19216-532-121

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.94](https://cos.googlesource.com/third_party/kernel/+/641f6bd58e060e095b56c0307945430ee63ca12c) | v27.5.1 | v2.1.9 | [See List](https://storage.googleapis.com/cos-tools/19216.532.121/lakitu/gpu_driver_versions.textproto) |

Fixed Updated cos-gpu-installer to v2.7.6.
Security Fixed CVE-2026-68116 in the Linux kernel.
Security Fixed CVE-2026-68139 in the Linux kernel.
Security Fixed CVE-2026-68171 in the Linux kernel.
Security Fixed CVE-2026-68325 in the Linux kernel.
Security Fixed CVE-2026-68336 in the Linux kernel.
Security Fixed CVE-2026-68343 in the Linux kernel.

## August 17, 2026

Change

### cos-125-19216-532-108

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.94](https://cos.googlesource.com/third_party/kernel/+/0be1f7be3821f7cb9ad728d32f04610a53b8a3d6) | v27.5.1 | v2.1.9 | [See List](https://storage.googleapis.com/cos-tools/19216.532.108/lakitu/gpu_driver_versions.textproto) |

Feature Enabled CONFIG_UDMABUF on x86_64.
Security Fixed CVE-2026-64380 in the Linux kernel.
Security Fixed CVE-2026-64561 in the Linux kernel.
Security Fixed CVE-2026-64562 in the Linux kernel.
Security Fixed CVE-2026-64567 in the Linux kernel.
Security Fixed CVE-2026-64572 in the Linux kernel.
Security Fixed CVE-2026-64576 in the Linux kernel.
Security Fixed CVE-2026-64579 in the Linux kernel.
Security Fixed CVE-2026-64580 in the Linux kernel.
Security Fixed CVE-2026-64590 in the Linux kernel.
Security Fixed CVE-2026-64593 in the Linux kernel.
Security Fixed CVE-2026-64597 in the Linux kernel.
Security Fixed CVE-2026-64598 in the Linux kernel.
Security Fixed CVE-2026-64604 in the Linux kernel.
Security Fixed CVE-2026-68092 in the Linux kernel.
Security Fixed CVE-2026-68119 in the Linux kernel.
Security Fixed CVE-2026-68136 in the Linux kernel.
Security Fixed CVE-2026-68142 in the Linux kernel.
Security Fixed CVE-2026-68145 in the Linux kernel.
Security Fixed CVE-2026-68146 in the Linux kernel.
Security Fixed CVE-2026-68147 in the Linux kernel.
Security Fixed CVE-2026-68149 in the Linux kernel.
Security Fixed CVE-2026-68184 in the Linux kernel.
Security Fixed CVE-2026-68186 in the Linux kernel.
Security Fixed CVE-2026-68187 in the Linux kernel.
Security Fixed CVE-2026-68284 in the Linux kernel.
Security Fixed CVE-2026-68338 in the Linux kernel.
Security Fixed CVE-2026-68388 in the Linux kernel.
Security Fixed CVE-2026-68396 in the Linux kernel.
Security Fixed CVE-2026-68398 in the Linux kernel.
Security Fixed CVE-2026-68422 in the Linux kernel.
Security Fixed CVE-2026-68425 in the Linux kernel.
Security Fixed CVE-2026-68428 in the Linux kernel.
Security Fixed CVE-2026-68432 in the Linux kernel.
Security Fixed CVE-2026-68442 in the Linux kernel.
Security Fixed CVE-2026-68450 in the Linux kernel.

## August 04, 2026

Change

### cos-125-19216-532-62

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.94](https://cos.googlesource.com/third_party/kernel/+/b55274a679ceb2601d9a03609106e985b577cb38) | v27.5.1 | v2.1.9 | [See List](https://storage.googleapis.com/cos-tools/19216.532.62/lakitu/gpu_driver_versions.textproto) |

Change cchost: Add bpf-lsm-policy for VM restrictions.
Fixed Added kernel patch to reduce bcache garbage collection sleep
interval to prevent I/O stalls.
Security Fixed CVE-2026-35177 in app-editors/vim and app-editors/vim-core.
Security Fixed CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, and CVE-2026-46598 in dev-go/crypto.
Security Fixed CVE-2026-58470 in net-misc/wget.
Security Fixed CVE-2026-59890 in dev-python/setuptools.
Security Fixed CVE-2026-64227 in the Linux kernel.
Security Fixed CVE-2026-64244 in the Linux kernel.
Security Fixed CVE-2026-64247 in the Linux kernel.
Security Fixed CVE-2026-64265 in the Linux kernel.
Security Fixed CVE-2026-64266 in the Linux kernel.
Security Fixed CVE-2026-64284 in the Linux kernel.
Security Fixed CVE-2026-64289 in the Linux kernel.
Security Fixed CVE-2026-64294 in the Linux kernel.
Security Fixed CVE-2026-64298 in the Linux kernel.
Security Fixed CVE-2026-64299 in the Linux kernel.
Security Fixed CVE-2026-64306 in the Linux kernel.
Security Fixed CVE-2026-64313 in the Linux kernel.
Security Fixed CVE-2026-64317 in the Linux kernel.
Security Fixed CVE-2026-64319 in the Linux kernel.
Security Fixed CVE-2026-64322 in the Linux kernel.
Security Fixed CVE-2026-64323 in the Linux kernel.
Security Fixed CVE-2026-64324 in the Linux kernel.
Security Fixed CVE-2026-64326 in the Linux kernel.
Security Fixed CVE-2026-64354 in the Linux kernel.
Security Fixed CVE-2026-64357 in the Linux kernel.
Security Fixed CVE-2026-64368 in the Linux kernel.
Security Fixed CVE-2026-64370 in the Linux kernel.
Security Fixed CVE-2026-64373 in the Linux kernel.
Security Fixed CVE-2026-64378 in the Linux kernel.
Security Fixed CVE-2026-64379 in the Linux kernel.
Security Fixed CVE-2026-64381 in the Linux kernel.
Security Fixed CVE-2026-64382 in the Linux kernel.
Security Fixed CVE-2026-64383 in the Linux kernel.
Security Fixed CVE-2026-64384 in the Linux kernel.
Security Fixed CVE-2026-64385 in the Linux kernel.
Security Fixed CVE-2026-64386 in the Linux kernel.
Security Fixed CVE-2026-64387 in the Linux kernel.
Security Fixed CVE-2026-64411 in the Linux kernel.
Security Fixed CVE-2026-64412 in the Linux kernel.
Security Fixed CVE-2026-64414 in the Linux kernel.
Security Fixed CVE-2026-64415 in the Linux kernel.
Security Fixed CVE-2026-64418 in the Linux kernel.
Security Fixed CVE-2026-64422 in the Linux kernel.
Security Fixed CVE-2026-64423 in the Linux kernel.
Security Fixed CVE-2026-64425 in the Linux kernel.
Security Fixed CVE-2026-64432 in the Linux kernel.
Security Fixed CVE-2026-64435 in the Linux kernel.
Security Fixed CVE-2026-64436 in the Linux kernel.
Security Fixed CVE-2026-64448 in the Linux kernel.
Security Fixed CVE-2026-64456 in the Linux kernel.
Security Fixed CVE-2026-64473 in the Linux kernel.
Security Fixed CVE-2026-64474 in the Linux kernel.
Security Fixed CVE-2026-64475 in the Linux kernel.
Security Fixed CVE-2026-64512 in the Linux kernel.
Security Fixed CVE-2026-64514 in the Linux kernel.
Security Upgraded net-libs/nghttp2 to 1.69.0 and fixed CVE-2026-58055.

## July 28, 2026

Change

### cos-125-19216-532-42

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.94](https://cos.googlesource.com/third_party/kernel/+/9afaeb55aac96322f3e70cd0cf09eb12fcd168f1) | v27.5.1 | v2.1.9 | [See List](https://storage.googleapis.com/cos-tools/19216.532.42/lakitu/gpu_driver_versions.textproto) |

Fixed Fixed an important bug for xfs file system users.
Fixed Updated udev rule for protected_stateful_partition
Security Fixed CVE-2026-29111 in sys-apps/systemd
Security Fixed CVE-2026-3644 in dev-lang/python
Security Fixed CVE-2026-40355 and CVE-2026-40356 in
app-crypt/mit-krb5.
Security Fixed CVE-2026-53381 in the Linux kernel.
Security Fixed CVE-2026-53385 in the Linux kernel.
Security Fixed CVE-2026-53388 in the Linux kernel.
Security Fixed CVE-2026-53391 in the Linux kernel.
Security Fixed CVE-2026-53392 in the Linux kernel.
Security Fixed CVE-2026-53393 in the Linux kernel.
Security Fixed CVE-2026-53394 in the Linux kernel.
Security Fixed CVE-2026-53397 in the Linux kernel.
Security Fixed CVE-2026-53398 in the Linux kernel.
Security Fixed CVE-2026-53400 in the Linux kernel.
Security Fixed CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, and
CVE-2026-60002 in openssh.
Security Fixed CVE-2026-6019 in dev-lang/python
Security Fixed CVE-2026-63795 in the Linux kernel.
Security Fixed CVE-2026-63800 in the Linux kernel.
Security Fixed CVE-2026-63802 in the Linux kernel.
Security Fixed CVE-2026-63806 in the Linux kernel.
Security Fixed CVE-2026-63807 in the Linux kernel.
Security Fixed CVE-2026-63809 in the Linux kernel.
Security Fixed CVE-2026-63810 in the Linux kernel.
Security Fixed CVE-2026-63823 in the Linux kernel.
Security Fixed CVE-2026-63824 in the Linux kernel.
Security Fixed CVE-2026-63827 in the Linux kernel.
Security Fixed CVE-2026-63828 in the Linux kernel.
Security Fixed CVE-2026-63829 in the Linux kernel.
Security Fixed CVE-2026-63830 in the Linux kernel.
Security Fixed CVE-2026-63833 in the Linux kernel.
Security Fixed CVE-2026-64187 in the Linux kernel.
Security Fixed CVE-2026-64189 in the Linux kernel.

## July 20, 2026

Change

### cos-125-19216-532-25

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.94](https://cos.googlesource.com/third_party/kernel/+/2049bd2bd5fb77d15efcbc7409707051cd3205c8) | v27.5.1 | v2.1.9 | [See List](https://storage.googleapis.com/cos-tools/19216.532.25/lakitu/gpu_driver_versions.textproto) |

Fixed Upgraded net-misc/curl to 8.21.0.
Security Fixed
CVE-2026-58013,CVE-2026-58014,CVE-2026-58015,CVE-2026-58016 in glib.
Security Fixed CVE-2026-43010 in the Linux kernel.
Security Fixed CVE-2026-43216 in the Linux kernel.
Security Fixed CVE-2026-58469, CVE-2026-58471, CVE-2026-58472 in net-misc/wget.
Security Updated containerd to v2.1.9. This resolves CVE-2026-46680,CVE-2026-50195,
CVE-2026-53492,CVE-2026-53488.

## July 13, 2026

Change

### cos-125-19216-532-14

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.94](https://cos.googlesource.com/third_party/kernel/+/847eb2fe7a011d36889f243da604899209354057) | v27.5.1 | v2.1.7 | [See List](https://storage.googleapis.com/cos-tools/19216.532.14/lakitu/gpu_driver_versions.textproto) |

Feature Enabled CONFIG_MEMORY_FAILURE in the Linux kernel for ARM64. This should improve memory errors handling when running CUDA workloads.
Fixed Changed google-guest-agent's plugin installation path to /var/lib/google/guest-agent.
Security Fixed CVE-2026-53341 in the Linux kernel.
Security Fixed KCTF-736b380 in the Linux kernel.

## July 09, 2026

Change

### cos-125-19216-532-9

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.94](https://cos.googlesource.com/third_party/kernel/+/5576e06b230afb3a4f89d660421d5400b443d9bc) | v27.5.1 | v2.1.7 | [See List](https://storage.googleapis.com/cos-tools/19216.532.9/lakitu/gpu_driver_versions.textproto) |

Fixed Added support for NVIDIA GRID driver version 580.159.03.
Security Fixed CVE-2026-40225 in sys-apps/systemd.
Security Fixed CVE-2026-53167 in the Linux kernel.
Security Fixed CVE-2026-53359 in the Linux kernel.
Security Fixed KCTF-d82ba05 in the Linux kernel.

## July 06, 2026

Change

### cos-125-19216-532-3

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.94](https://cos.googlesource.com/third_party/kernel/+/68df3c124b6c1b28325aae6b20030bd6d4e87f2c) | v27.5.1 | v2.1.7 | [See List](https://storage.googleapis.com/cos-tools/19216.532.3/lakitu/gpu_driver_versions.textproto) |

Change Updated the Linux kernel to v6.12.94. It resolves CVE-2026-52908,CVE-2026-52910, CVE-2026-52912,CVE-2026-52920, CVE-2026-52921,CVE-2026-52923, CVE-2026-52925,CVE-2026-52927, CVE-2026-52928,CVE-2026-52930, CVE-2026-52933,CVE-2026-52936, CVE-2026-52942,CVE-2026-52943, CVE-2026-52945,CVE-2026-52946, CVE-2026-52967,CVE-2026-52969, CVE-2026-52970,CVE-2026-52972, CVE-2026-52974,CVE-2026-52977, CVE-2026-52980,CVE-2026-52981, CVE-2026-52984,CVE-2026-52986, CVE-2026-52989,CVE-2026-52990, CVE-2026-52998,CVE-2026-52999, CVE-2026-53001,CVE-2026-53002, CVE-2026-53003,CVE-2026-53006, CVE-2026-53012,CVE-2026-53013, CVE-2026-53014,CVE-2026-53021, CVE-2026-53023,CVE-2026-53031, CVE-2026-53032,CVE-2026-53033, CVE-2026-53034,CVE-2026-53035, CVE-2026-53036,CVE-2026-53038, CVE-2026-53050,CVE-2026-53053, CVE-2026-53060,CVE-2026-53061, CVE-2026-53062,CVE-2026-53063, CVE-2026-53064,CVE-2026-53069, CVE-2026-53074,CVE-2026-53075, CVE-2026-53076,CVE-2026-53080, CVE-2026-53081,CVE-2026-53083, CVE-2026-53084,CVE-2026-53085, CVE-2026-53094,CVE-2026-53096, CVE-2026-53111,CVE-2026-53115, CVE-2026-53120,CVE-2026-53122, CVE-2026-53123,CVE-2026-53126, CVE-2026-53129,CVE-2026-53132.
Fixed Upgraded app-admin/oslogin to v20260626.00.
Fixed Upgraded app-containers/docker-credential-helpers to v0.9.8.
Fixed Upgraded dev-db/sqlite to v3.53.3.
Fixed Upgraded dev-libs/expat to v2.8.2.
Fixed Upgraded net-misc/socat to v1.8.1.3.
Security Fixed CVE-2026-35388 in net-misc/openssh.
Security Fixed CVE-2026-40226 in sys-apps/systemd.
Security Fixed CVE-2026-52921 in the Linux kernel.
Security Fixed CVE-2026-52927 in the Linux kernel.
Security Fixed CVE-2026-52930 in the Linux kernel.
Security Fixed CVE-2026-52942 in the Linux kernel.
Security Fixed CVE-2026-53033 in the Linux kernel.
Security Fixed CVE-2026-53122 in the Linux kernel.
Security Fixed CVE-2026-53131 in the Linux kernel.
Security Fixed CVE-2026-53134 in the Linux kernel.
Security Fixed CVE-2026-53154 in the Linux kernel.
Security Fixed CVE-2026-53156 in the Linux kernel.
Security Fixed CVE-2026-53168 in the Linux kernel.
Security Fixed CVE-2026-53180 in the Linux kernel.
Security Fixed CVE-2026-53181 in the Linux kernel.
Security Fixed CVE-2026-53184 in the Linux kernel.
Security Fixed CVE-2026-53185 in the Linux kernel.
Security Fixed CVE-2026-53189 in the Linux kernel.
Security Fixed CVE-2026-53191 in the Linux kernel.
Security Fixed CVE-2026-53199 in the Linux kernel.
Security Fixed CVE-2026-53207 in the Linux kernel.
Security Fixed CVE-2026-53212 in the Linux kernel.
Security Fixed CVE-2026-53214 in the Linux kernel.
Security Fixed CVE-2026-53218 in the Linux kernel.
Security Fixed CVE-2026-53219 in the Linux kernel.
Security Fixed CVE-2026-53220 in the Linux kernel.
Security Fixed CVE-2026-53223 in the Linux kernel.
Security Fixed CVE-2026-53229 in the Linux kernel.
Security Fixed CVE-2026-53230 in the Linux kernel.
Security Fixed CVE-2026-53232 in the Linux kernel.
Security Fixed CVE-2026-53233 in the Linux kernel.
Security Fixed CVE-2026-53236 in the Linux kernel.
Security Fixed CVE-2026-53239 in the Linux kernel.
Security Fixed CVE-2026-53249 in the Linux kernel.
Security Fixed CVE-2026-53264 in the Linux kernel.
Security Fixed CVE-2026-53265 in the Linux kernel.
Security Fixed CVE-2026-53266 in the Linux kernel.
Security Fixed CVE-2026-53267 in the Linux kernel.
Security Fixed CVE-2026-53268 in the Linux kernel.
Security Fixed CVE-2026-53269 in the Linux kernel.
Security Fixed CVE-2026-53270 in the Linux kernel.
Security Fixed CVE-2026-53275 in the Linux kernel.

## June 29, 2026

Change

### cos-125-19216-395-138

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.85](https://cos.googlesource.com/third_party/kernel/+/97bb848ad07a5d645a2ca2193f223dbb01908690) | v27.5.1 | v2.1.7 | [See List](https://storage.googleapis.com/cos-tools/19216.395.138/lakitu/gpu_driver_versions.textproto) |

Change Updated app-containers/docker-credential-gcr to v2.1.32, app-containers/docker-credential-helpers to v0.9.7, app-containers/nvidia-container-toolkit to v1.17.9, dev-libs/isa-l to v2.31.1, dev-python/oauthlib to v3.0.2, net-fs/nfs-utils to v2.6.4, sec-policy/apparmor-profiles to v3.1.7, sys-apps/apparmor to v3.1.7, sys-libs/libapparmor to v3.1.7.
Change Updated app-editors/vim to v9.1.2148, app-editors/vim-core to v9.1.2148, dev-libs/libtraceevent to v1.7.3, dev-libs/libtracefs to v1.6.4, net-firewall/conntrack-tools to v1.4.9, sys-fs/fuse to v2.9.9, sys-fs/fuse-common to v3.10.5.
Change Updated gzip to v1.14_p20260502, xz-utils to v5.4.7, zstd to v1.5.7, python-exec-conf to v2.4.10, expat to v2.8.1, json-c to v0.16.20220414, libaio to v0.3.113, xxhash to v0.8.3, PySocks to v1.6.8, cryptography to v39.0.2, markupsafe to v2.1.5, pyrsistent to v0.14.11, python-magic to v0.4.27, pyyaml to v6.0.3, rfc3339-validator to v0.1.4, urllib3 to v1.26.20, c-ares to v1.34.6, iptables to v1.8.13, gentoo-functions to v1.7.7, mawk to v1.3.4_p20260302, lvm2 to v2.03.39, binutils-libs to v2.46.1, libxcrypt to v4.4.38, talloc to v2.4.4.
Feature Added cos-dkms support for vast client
drivers v4.5.7.
Feature Support nvidia-fs for COS GPU installer
Fixed Upgraded app-admin/logrotate to v3.22.0-r1.
Fixed Upgraded app-admin/sosreport to v4.11.2.
Fixed Upgraded app-shells/dash to v0.5.13.4-r2.
Fixed Upgraded dev-db/sqlite to v3.53.1.
Fixed Upgraded net-misc/curl to v8.20.0-r1.
Fixed Upgraded net-misc/rsync to v3.4.4.
Fixed Upgraded sys-apps/gentoo-functions to v1.7.6.
Fixed Upgraded sys-apps/less to v704.
Security Fixed CVE-2026-11822, CVE-2026-11824 in dev-db/sqlite.
Security Fixed CVE-2026-43116 in the Linux kernel.
Security Fixed CVE-2026-45850 in the Linux kernel.
Security Fixed CVE-2026-52908 in the Linux kernel.
Security Fixed CVE-2026-52910 in the Linux kernel.
Security Fixed CVE-2026-52912 in the Linux kernel.
Security Fixed CVE-2026-52920 in the Linux kernel.
Security Fixed CVE-2026-52923 in the Linux kernel.
Security Fixed CVE-2026-52925 in the Linux kernel.
Security Fixed CVE-2026-52928 in the Linux kernel.
Security Fixed CVE-2026-52933 in the Linux kernel.
Security Fixed CVE-2026-52936 in the Linux kernel.
Security Fixed CVE-2026-52943 in the Linux kernel.
Security Fixed CVE-2026-52969 in the Linux kernel.
Security Fixed CVE-2026-52970 in the Linux kernel.
Security Fixed CVE-2026-52974 in the Linux kernel.
Security Fixed CVE-2026-52977 in the Linux kernel.
Security Fixed CVE-2026-52980 in the Linux kernel.
Security Fixed CVE-2026-52981 in the Linux kernel.
Security Fixed CVE-2026-52984 in the Linux kernel.
Security Fixed CVE-2026-52986 in the Linux kernel.
Security Fixed CVE-2026-52989 in the Linux kernel.
Security Fixed CVE-2026-52990 in the Linux kernel.
Security Fixed CVE-2026-52998 in the Linux kernel.
Security Fixed CVE-2026-52999 in the Linux kernel.
Security Fixed CVE-2026-53001 in the Linux kernel.
Security Fixed CVE-2026-53002 in the Linux kernel.
Security Fixed CVE-2026-53003 in the Linux kernel.
Security Fixed CVE-2026-53006 in the Linux kernel.
Security Fixed CVE-2026-53012 in the Linux kernel.
Security Fixed CVE-2026-53013 in the Linux kernel.
Security Fixed CVE-2026-53014 in the Linux kernel.
Security Fixed CVE-2026-53021 in the Linux kernel.
Security Fixed CVE-2026-53023 in the Linux kernel.
Security Fixed CVE-2026-53031 in the Linux kernel.
Security Fixed CVE-2026-53032 in the Linux kernel.
Security Fixed CVE-2026-53034 in the Linux kernel.
Security Fixed CVE-2026-53035 in the Linux kernel.
Security Fixed CVE-2026-53036 in the Linux kernel.
Security Fixed CVE-2026-53050 in the Linux kernel.
Security Fixed CVE-2026-53060 in the Linux kernel.
Security Fixed CVE-2026-53062 in the Linux kernel.
Security Fixed CVE-2026-53063 in the Linux kernel.
Security Fixed CVE-2026-53064 in the Linux kernel.
Security Fixed CVE-2026-53069 in the Linux kernel.
Security Fixed CVE-2026-53074 in the Linux kernel.
Security Fixed CVE-2026-53075 in the Linux kernel.
Security Fixed CVE-2026-53076 in the Linux kernel.
Security Fixed CVE-2026-53080 in the Linux kernel.
Security Fixed CVE-2026-53083 in the Linux kernel.
Security Fixed CVE-2026-53085 in the Linux kernel.
Security Fixed CVE-2026-53094 in the Linux kernel.
Security Fixed CVE-2026-53096 in the Linux kernel.
Security Fixed CVE-2026-53111 in the Linux kernel.
Security Fixed CVE-2026-53115 in the Linux kernel.
Security Fixed CVE-2026-53120 in the Linux kernel.
Security Fixed CVE-2026-53123 in the Linux kernel.
Security Fixed CVE-2026-53126 in the Linux kernel.
Security Fixed CVE-2026-53129 in the Linux kernel.
Security Fixed CVE-2026-7210 in dev-lang/python.
Security Upgraded dev-libs/openssl to v3.5.7 to fix CVE-2026-45445,
CVE-2026-34180,CVE-2026-9076,CVE-2026-34181,CVE-2026-42764,CVE-2026-34183,
CVE-2026-34182,CVE-2026-45447,CVE-2026-7383.

## June 22, 2026

Change

### cos-125-19216-395-112

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.85](https://cos.googlesource.com/third_party/kernel/+/1dd147644c2ffa2b98ed57056012bfed5c2d2190) | v27.5.1 | v2.1.7 | [See List](https://storage.googleapis.com/cos-tools/19216.395.112/lakitu/gpu_driver_versions.textproto) |

Announcement Minor changes.

## June 18, 2026

Change

### cos-125-19216-395-109

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.85](https://cos.googlesource.com/third_party/kernel/+/1dd147644c2ffa2b98ed57056012bfed5c2d2190) | v27.5.1 | v2.1.7 | [See List](https://storage.googleapis.com/cos-tools/19216.395.109/lakitu/gpu_driver_versions.textproto) |

Change Updated oslogin to v20260605.00.
Security Fix CVE-2026-41568 in app-containers/docker.
Security Fix CVE-2026-415687 in app-containers/docker.
Security Fix CVE-2026-42306 in app-containers/docker.
Security Fixed CVE-2026-46315 in the Linux kernel.
Security Fixed CVE-2026-46321 in the Linux kernel.
Security Fixed CVE-2026-46322 in the Linux kernel.
Security Fixed CVE-2026-46323 in the Linux kernel.
Security Fixed CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, and CVE-2026-47262 in app-containers/containerd.
Change Runtime sysctl changes:

- Changed: net.ipv4.udp_mem: 188034 250715 376068 -\> 188034 250714 376068

<br />

## June 15, 2026

Change

### cos-125-19216-395-101

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.85](https://cos.googlesource.com/third_party/kernel/+/19cc070c0f9a696f1ec666a1c12e685222e54963) | v27.5.1 | v2.1.7 | [See List](https://storage.googleapis.com/cos-tools/19216.395.101/lakitu/gpu_driver_versions.textproto) |

Fixed Fixed a race condition triggered by ext4 online resize that
rarely causes machines to fail to boot.
Fixed Upgraded cos-gpu-installer to v2.7.4.
Fixed Upgraded sys-apps/less to v702.
Fixed Uprev sys-kernel/lakitu-kernel-6_12 to v6.12.92
Security Fixed CVE-2025-71289 in the Linux kernel.
Security Fixed CVE-2026-23394 in the Linux kernel.
Security Fixed CVE-2026-43245 in the Linux kernel.
Security Fixed CVE-2026-46160 in the Linux kernel.
Security Fixed CVE-2026-46244 in the Linux kernel.
Security Fixed CVE-2026-46274 in the Linux kernel.
Security Fixed CVE-2026-46283 in the Linux kernel.
Security Fixed CVE-2026-46289 in the Linux kernel.
Security Fixed CVE-2026-46294 in the Linux kernel.
Security Fixed CVE-2026-46303 in the Linux kernel.
Security Fixed CVE-2026-46304 in the Linux kernel.
Security Fixed CVE-2026-46306 in the Linux kernel.
Security Fixed CVE-2026-46316 in the Linux kernel.
Security Fixed KCTF-def602e in the Linux kernel.
Security Updated dev-python/pyjwt to v2.13.0. This fixes
CVE-2026-48522, CVE-2026-48524, CVE-2026-48525, CVE-2026-485256.

## June 08, 2026

Change

### cos-125-19216-395-73

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.85](https://cos.googlesource.com/third_party/kernel/+/9b2019e2a0a65bafcc7fb941120bfa3088ef8a59) | v27.5.1 | v2.1.7 | [See List](https://storage.googleapis.com/cos-tools/19216.395.73/lakitu/gpu_driver_versions.textproto) |

Change Updated minijail to r188.
Security Fixed CVE-2026-43303 in the Linux kernel.
Security Fixed CVE-2026-43492 in the Linux kernel.
Security Fixed CVE-2026-43496 in the Linux kernel.
Security Fixed CVE-2026-43499 in the Linux kernel.
Security Fixed CVE-2026-43503 in the Linux kernel.
Security Fixed CVE-2026-45837 in the Linux kernel.
Security Fixed CVE-2026-45838 in the Linux kernel.
Security Fixed CVE-2026-45839 in the Linux kernel.
Security Fixed CVE-2026-45841 in the Linux kernel.
Security Fixed CVE-2026-45842 in the Linux kernel.
Security Fixed CVE-2026-45843 in the Linux kernel.
Security Fixed CVE-2026-45844 in the Linux kernel.
Security Fixed CVE-2026-45987 in the Linux kernel.
Security Fixed CVE-2026-45991 in the Linux kernel.
Security Fixed CVE-2026-45997 in the Linux kernel.
Security Fixed CVE-2026-46005 in the Linux kernel.
Security Fixed CVE-2026-46015 in the Linux kernel.
Security Fixed CVE-2026-46021 in the Linux kernel.
Security Fixed CVE-2026-46033 in the Linux kernel.
Security Fixed CVE-2026-46037 in the Linux kernel.
Security Fixed CVE-2026-46040 in the Linux kernel.
Security Fixed CVE-2026-46046 in the Linux kernel.
Security Fixed CVE-2026-46050 in the Linux kernel.
Security Fixed CVE-2026-46051 in the Linux kernel.
Security Fixed CVE-2026-46061 in the Linux kernel.
Security Fixed CVE-2026-46062 in the Linux kernel.
Security Fixed CVE-2026-46065 in the Linux kernel.
Security Fixed CVE-2026-46070 in the Linux kernel.
Security Fixed CVE-2026-46072 in the Linux kernel.
Security Fixed CVE-2026-46076 in the Linux kernel.
Security Fixed CVE-2026-46082 in the Linux kernel.
Security Fixed CVE-2026-46086 in the Linux kernel.
Security Fixed CVE-2026-46089 in the Linux kernel.
Security Fixed CVE-2026-46094 in the Linux kernel.
Security Fixed CVE-2026-46101 in the Linux kernel.
Security Fixed CVE-2026-46102 in the Linux kernel.
Security Fixed CVE-2026-46106 in the Linux kernel.
Security Fixed CVE-2026-46107 in the Linux kernel.
Security Fixed CVE-2026-46108 in the Linux kernel.
Security Fixed CVE-2026-46115 in the Linux kernel.
Security Fixed CVE-2026-46116 in the Linux kernel.
Security Fixed CVE-2026-46120 in the Linux kernel.
Security Fixed CVE-2026-46124 in the Linux kernel.
Security Fixed CVE-2026-46128 in the Linux kernel.
Security Fixed CVE-2026-46129 in the Linux kernel.
Security Fixed CVE-2026-46131 in the Linux kernel.
Security Fixed CVE-2026-46132 in the Linux kernel.
Security Fixed CVE-2026-46135 in the Linux kernel.
Security Fixed CVE-2026-46139 in the Linux kernel.
Security Fixed CVE-2026-46149 in the Linux kernel.
Security Fixed CVE-2026-46150 in the Linux kernel.
Security Fixed CVE-2026-46155 in the Linux kernel.
Security Fixed CVE-2026-46159 in the Linux kernel.
Security Fixed CVE-2026-46161 in the Linux kernel.
Security Fixed CVE-2026-46172 in the Linux kernel.
Security Fixed CVE-2026-46173 in the Linux kernel.
Security Fixed CVE-2026-46174 in the Linux kernel.
Security Fixed CVE-2026-46176 in the Linux kernel.
Security Fixed CVE-2026-46177 in the Linux kernel.
Security Fixed CVE-2026-46185 in the Linux kernel.
Security Fixed CVE-2026-46193 in the Linux kernel.
Security Fixed CVE-2026-46195 in the Linux kernel.
Security Fixed CVE-2026-46196 in the Linux kernel.
Security Fixed CVE-2026-46209 in the Linux kernel.
Security Fixed CVE-2026-46214 in the Linux kernel.
Security Fixed CVE-2026-46234 in the Linux kernel.
Security Fixed CVE-2026-46243 in the Linux kernel.
Security Fixed CVE-2026-46300 in the Linux kernel.

## June 01, 2026

Change

### cos-125-19216-395-55

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.85](https://cos.googlesource.com/third_party/kernel/+/d2ec5b118f6f5f38bb03d3079965327c76256ba1) | v27.5.1 | v2.1.7 | [See List](https://storage.googleapis.com/cos-tools/19216.395.55/lakitu/gpu_driver_versions.textproto) |

Change Allow overriding IMA policy from oem partition.
Change On cchost boards, autoload IMA policy on boot.
Change Set static UUID for the stateful partition.
Fixed Added support for NVIDIA driver v580.159.04.

## May 26, 2026

Change

### cos-125-19216-395-47

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.85](https://cos.googlesource.com/third_party/kernel/+/b82d4fb79da9ccb0fb216da3a51f977397f3193d) | v27.5.1 | v2.1.7 | [See List](https://storage.googleapis.com/cos-tools/19216.395.47/lakitu/gpu_driver_versions.textproto) |

Announcement This update contains several package upgrades to the latest patch version to ensure security, along with package patches for known CVEs.
Change Added support for the `swiotlb=any` kernel command line parameter.
Change Update sys-process/audit to v3.0.9.
Change Updated glib to v2.86.5.
Change Upgrade app-admin/fluent-bit to v3.2.10
Change Updated sys-libs/pam to v1.5.3.
Change Upgraded net-misc/openssh to v10.0_p2.
Fixed Fixed a crash that occurs when using the `configfile` or
`source` GRUB2 commands when Secure Boot is enabled.
Fixed Upgraded cos-gpu-installer to v2.7.2.
Security Fixed CVE-2026-23171 in the Linux kernel.
Security Fixed CVE-2026-31419 in the Linux kernel.
Security Fixed CVE-2026-31709 in the Linux kernel.
Security Fixed CVE-2026-43088 in the Linux kernel.
Security Fixed CVE-2026-44431 in dev-python/urllib3.
Security Fixed CVE-2026-6732 in dev-libs/libxml2.
Security Fixed KCTF-9e6bf14 in the Linux kernel.
Security Updated dev-lang/go to 1.25.10. This fixes CVE-2026-42499,CVE-2026-39820,CVE-2026-39826,CVE-2026-33814,CVE-2026-39836,CVE-2026-39823,CVE-2026-39825,CVE-2026-39817,CVE-2026-39819.
Security Updated net-misc/curl to v8.20. This fixes CVE-2026-5545,CVE-2026-4873,CVE-2026-6429,CVE-2026-7168,CVE-2026-6253,CVE-2026-6276,CVE-2026-7009,CVE-2026-5773.

## May 21, 2026

Change

### cos-125-19216-395-31

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.85](https://cos.googlesource.com/third_party/kernel/+/5241cda1d789949bbcddde5d9320a36c610237d4) | v27.5.1 | v2.1.7 | [See List](https://storage.googleapis.com/cos-tools/19216.395.31/lakitu/gpu_driver_versions.textproto) |

Change Switch cchost-\* boards to legacy iptables.
Fixed Added support for NVIDIA driver v535.309.01.
Fixed Added support for NVIDIA driver v580.159.03.
Fixed Added support for NVIDIA driver v595.71.05.
Fixed Upgraded app-shells/dash to v0.5.13.4.
Fixed Upgraded cos-gpu-installer to v2.7.1.
Fixed Upgraded net-misc/rsync to v3.4.2.
Security Fixed CVE-2025-38584 in the Linux kernel.
Security Fixed CVE-2026-23473 in the Linux kernel.
Security Fixed CVE-2026-46333 in the Linux kernel.
Security Fixed argument injection in toolbox.

## May 11, 2026

Change

### cos-125-19216-395-7

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.85](https://cos.googlesource.com/third_party/kernel/+/8615dfb7470816ab28b148bb67bba5f12bb4ea0b) | v27.5.1 | v2.1.7 | [See List](https://storage.googleapis.com/cos-tools/19216.395.7/lakitu/gpu_driver_versions.textproto) |

Change Runtime sysctl changes:

- Changed: net.ipv4.udp_mem: 188034 250715 376068 -\> 188034 250714 376068

<br />

## May 08, 2026

Change

### cos-125-19216-395-4

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.85](https://cos.googlesource.com/third_party/kernel/+/8615dfb7470816ab28b148bb67bba5f12bb4ea0b) | v27.5.1 | v2.1.7 | [See List](https://storage.googleapis.com/cos-tools/19216.395.4/lakitu/gpu_driver_versions.textproto) |

Announcement This is an [LTS Refresh release.](https://docs.cloud.google.com/container-optimized-os/docs/concepts/versioning.md.txt#lts_refresh_releases)
Security Fixed CVE-2026-43284 (dirtyfrag) in the Linux kernel.
Change Apply hardening sysctls on cchost boards.
Change Enabled mm hardening kernel cmdlines on cchost.
Fixed Upgraded dev-db/sqlite to v3.51.2.
Fixed Upgraded dev-libs/expat to v2.7.4.
Fixed Upgraded net-libs/libnetfilter_conntrack to v1.1.1.
Fixed Upgraded sys-libs/libseccomp to v2.6.0-r3.
Fixed Upgraded sys-process/procps to v4.0.6.
Security Fixed CVE-2026-31693 in the Linux kernel.
Security Fixed CVE-2026-31694 in the Linux kernel.
Security Fixed CVE-2026-31700 in the Linux kernel.
Security Fixed CVE-2026-31708 in the Linux kernel.
Security Fixed CVE-2026-31716 in the Linux kernel.
Security Fixed CVE-2026-31738 in the Linux kernel.
Security Fixed CVE-2026-31752 in the Linux kernel.
Security Fixed CVE-2026-31774 in the Linux kernel.
Security Fixed CVE-2026-31781 in the Linux kernel.
Security Fixed CVE-2026-35385 and CVE-2026-35386 in net-misc/openssh.
Security Fixed CVE-2026-43012 in the Linux kernel.
Security Fixed CVE-2026-43013 in the Linux kernel.
Security Fixed CVE-2026-43016 in the Linux kernel.
Security Fixed CVE-2026-43024 in the Linux kernel.
Security Fixed CVE-2026-43026 in the Linux kernel.
Security Fixed CVE-2026-43027 in the Linux kernel.
Security Fixed CVE-2026-43028 in the Linux kernel.
Security Fixed CVE-2026-43030 in the Linux kernel.
Security Fixed CVE-2026-43035 in the Linux kernel.
Security Fixed CVE-2026-43037 in the Linux kernel.
Security Fixed CVE-2026-43038 in the Linux kernel.
Security Fixed CVE-2026-43040 in the Linux kernel.
Security Fixed CVE-2026-43043 in the Linux kernel.
Security Fixed CVE-2026-43057 in the Linux kernel.
Security Upgraded cos-gpu-installer to v2.6.8.
Security Upgraded dev-libs/libgcrypt to v1.10.4 to fix CVE-2026-41989.
Change Runtime sysctl changes:

- Changed: net.ipv4.udp_mem: 188034 250714 376068 -\> 188034 250715 376068

<br />

## May 04, 2026

Change

### cos-125-19216-220-185

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.68](https://cos.googlesource.com/third_party/kernel/+/6c4905f5e0a57864e8f8d2792397d30065f6ba4b) | v27.5.1 | v2.1.7 | [See List](https://storage.googleapis.com/cos-tools/19216.220.185/lakitu/gpu_driver_versions.textproto) |

Security Fixed CVE-2025-39764 in the Linux kernel.
Security Fixed CVE-2025-68239 in the Linux kernel.
Security Fixed CVE-2025-71161 in the Linux kernel.
Security Fixed CVE-2026-23004 in the Linux kernel.
Security Fixed CVE-2026-23138 in the Linux kernel.
Security Fixed CVE-2026-23157 in the Linux kernel.
Security Fixed CVE-2026-23277 in the Linux kernel.
Security Fixed CVE-2026-23375 in the Linux kernel.
Security Fixed CVE-2026-23391 in the Linux kernel.
Security Fixed CVE-2026-23401 in the Linux kernel.
Security Fixed CVE-2026-23417 in the Linux kernel.
Security Fixed CVE-2026-23439 in the Linux kernel.
Security Fixed CVE-2026-23458 in the Linux kernel.
Security Fixed CVE-2026-31403 in the Linux kernel.
Security Fixed CVE-2026-31546 in the Linux kernel.
Security Fixed CVE-2026-31554 in the Linux kernel.
Security Fixed CVE-2026-31555 in the Linux kernel.
Security Fixed CVE-2026-31561 in the Linux kernel.
Security Fixed CVE-2026-31590 in the Linux kernel.
Security Fixed CVE-2026-31593 in the Linux kernel.
Security Fixed CVE-2026-31614 in the Linux kernel.
Security Fixed CVE-2026-31628 in the Linux kernel.
Security Fixed CVE-2026-31647 in the Linux kernel.
Security Fixed CVE-2026-31665 in the Linux kernel.
Security Fixed CVE-2026-31671 in the Linux kernel.
Security Fixed CVE-2026-31673 in the Linux kernel.
Security Fixed CVE-2026-31675 in the Linux kernel.
Security Fixed CVE-2026-31677 in the Linux kernel.
Security Fixed CVE-2026-31680 in the Linux kernel.
Security Fixed CVE-2026-31681 in the Linux kernel.
Security Fixed CVE-2026-31682 in the Linux kernel.
Security Fixed CVE-2026-31688 in the Linux kernel.
Security Upgraded dev-libs/openssl to v3.5.6 to fix CVE-2026-28387,
CVE-2026-28388,CVE-2026-28389,CVE-2026-28390,CVE-2026-31790.
Change Runtime sysctl changes:

- Changed: net.ipv4.udp_mem: 188034 250715 376068 -\> 188034 250714 376068

<br />

## May 01, 2026

Change

### cos-125-19216-220-180

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.68](https://cos.googlesource.com/third_party/kernel/+/62c8397822908f2ff448fcb9691e81a9902dfc8b) | v27.5.1 | v2.1.7 | [See List](https://storage.googleapis.com/cos-tools/19216.220.180/lakitu/gpu_driver_versions.textproto) |

Change Made it so that /etc/machine-id is mounted with noexec, nosuid, and nodev.
Fixed Fixed an ext4/jbd2 performance regression on CPU Node.
Fixed Optimized IOMMU reference counting using atomic64_inc_return().
Fixed Serialized sequence allocation to prevent timeouts during
concurrent TLB invalidations.
Security Fixed CVE-2026-31431 (copy.fail) in the Linux kernel.
Security Fixed CVE-2026-31664 in the Linux kernel.

## April 28, 2026

Change

### cos-125-19216-220-174

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.68](https://cos.googlesource.com/third_party/kernel/+/86ce3b3fe7e3b54c836775f62acff9f5218e166e) | v27.5.1 | v2.1.7 | [See List](https://storage.googleapis.com/cos-tools/19216.220.174/lakitu/gpu_driver_versions.textproto) |

Change Added support for the R595 Nvidia driver production branch.
Fixed Added support for NVIDIA drivers v580.126.16 and v580.126.20.
Fixed Fixed KCTF-42156f9 in the Linux kernel.
Fixed Upgraded app-admin/sosreport to v4.11.1.
Fixed Upgraded app-shells/dash to v0.5.13.3.
Fixed Upgraded sys-apps/makedumpfile to v1.7.9.
Security Fixed CVE-2025-22116 in the Linux kernel.
Security Fixed CVE-2025-40135 in the Linux kernel.
Security Fixed CVE-2025-70873 in dev-db/sqlite.
Security Fixed CVE-2026-23245 in the Linux kernel.
Security Fixed CVE-2026-23255 in the Linux kernel.
Security Fixed CVE-2026-23276 in the Linux kernel.
Security Fixed CVE-2026-23302 in the Linux kernel.
Security Fixed CVE-2026-23368 in the Linux kernel.
Security Fixed CVE-2026-23374 in the Linux kernel.
Security Fixed CVE-2026-23397 in the Linux kernel.
Security Fixed CVE-2026-23398 in the Linux kernel.
Security Fixed CVE-2026-23399 in the Linux kernel.
Security Fixed CVE-2026-23412 in the Linux kernel.
Security Fixed CVE-2026-23413 in the Linux kernel.
Security Fixed CVE-2026-23441 in the Linux kernel.
Security Fixed CVE-2026-23442 in the Linux kernel.
Security Fixed CVE-2026-23449 in the Linux kernel.
Security Fixed CVE-2026-23452 in the Linux kernel.
Security Fixed CVE-2026-23455 in the Linux kernel.
Security Fixed CVE-2026-23456 in the Linux kernel.
Security Fixed CVE-2026-23457 in the Linux kernel.
Security Fixed CVE-2026-23465 in the Linux kernel.
Security Fixed CVE-2026-23471 in the Linux kernel.
Security Fixed CVE-2026-31392 in the Linux kernel.
Security Fixed CVE-2026-31400 in the Linux kernel.
Security Fixed CVE-2026-31402 in the Linux kernel.
Security Fixed CVE-2026-31406 in the Linux kernel.
Security Fixed CVE-2026-31407 in the Linux kernel.
Security Fixed CVE-2026-31414 in the Linux kernel.
Security Fixed CVE-2026-31415 in the Linux kernel.
Security Fixed CVE-2026-31416 in the Linux kernel.
Security Fixed CVE-2026-31418 in the Linux kernel.
Security Fixed CVE-2026-31421 in the Linux kernel.
Security Fixed CVE-2026-31423 in the Linux kernel.
Security Fixed CVE-2026-31424 in the Linux kernel.
Security Fixed CVE-2026-31426 in the Linux kernel.
Security Fixed CVE-2026-31427 in the Linux kernel.
Security Fixed CVE-2026-31428 in the Linux kernel.
Security Fixed CVE-2026-31434 in the Linux kernel.
Security Fixed CVE-2026-31438 in the Linux kernel.
Security Fixed CVE-2026-31446 in the Linux kernel.
Security Fixed CVE-2026-31447 in the Linux kernel.
Security Fixed CVE-2026-31448 in the Linux kernel.
Security Fixed CVE-2026-31449 in the Linux kernel.
Security Fixed CVE-2026-31450 in the Linux kernel.
Security Fixed CVE-2026-31451 in the Linux kernel.
Security Fixed CVE-2026-31452 in the Linux kernel.
Security Fixed CVE-2026-31453 in the Linux kernel.
Security Fixed CVE-2026-31454 in the Linux kernel.
Security Fixed CVE-2026-31455 in the Linux kernel.
Security Fixed CVE-2026-31466 in the Linux kernel.
Security Fixed CVE-2026-31469 in the Linux kernel.
Security Fixed CVE-2026-31495 in the Linux kernel.
Security Fixed CVE-2026-31496 in the Linux kernel.
Security Fixed CVE-2026-31515 in the Linux kernel.
Security Fixed CVE-2026-31516 in the Linux kernel.
Security Fixed CVE-2026-31519 in the Linux kernel.
Security Fixed CVE-2026-31521 in the Linux kernel.
Security Fixed CVE-2026-31523 in the Linux kernel.
Security Fixed CVE-2026-31525 in the Linux kernel.
Security Fixed CVE-2026-31528 in the Linux kernel.
Security Fixed CVE-2026-31531 in the Linux kernel.
Security Fixed CVE-2026-31557 in the Linux kernel.
Security Fixed CVE-2026-31648 in the Linux kernel.
Security Fixed CVE-2026-31667 in the Linux kernel.
Security Fixed CVE-2026-32280, CVE-2026-32281, CVE-2026-32283,
CVE-2026-27140, CVE-2026-27144 in dev-lang/go.
Security Fixed CVE-2026-34743 in app-arch/xz-utils.
Security Fixed CVE-2026-4046 in sys-libs/glibc.
Security Fixed KCTF-42156f9 in the Linux kernel.

## April 27, 2026

Change

### cos-125-19216-220-150

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.68](https://cos.googlesource.com/third_party/kernel/+/290dd196f19720702d0837eb8c03202d0f63b7ef) | v27.5.1 | v2.1.7 | [See List](https://storage.googleapis.com/cos-tools/19216.220.150/lakitu/gpu_driver_versions.textproto) |

Fixed Resolved an issue that could cause soft lockups
in stressed environments when iommu.strict=1
Fixed Upgraded app-shells/dash to v0.5.13.2.
Fixed Upgraded sys-libs/libseccomp to v2.6.0-r3.
Fixed Upgraded sys-process/lsof to v4.99.6.
Security Fixed CVE-2026-0994 in dev-libs/protobuf.
Security Fixed CVE-2026-35414 in net-misc/openssh.
Security Fixed CVE-2026-4437,CVE-2026-4438 in sys-libs/glibc.
Security Fixed KCTF-7e3955b in the Linux kernel.
Security Fixed KCTF-a9b8b18 in the Linux kernel.
Security Upgraded containerd to v2.1.7. This fixes CVE-2026-35469.

## April 13, 2026

Change

### cos-125-19216-220-130

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.68](https://cos.googlesource.com/third_party/kernel/+/ac718bd9b1307ca355c5ad6cfcd520cdd7f6e27d) | v27.5.1 | v2.1.5 | [See List](https://storage.googleapis.com/cos-tools/19216.220.130/lakitu/gpu_driver_versions.textproto) |

Feature Changed default sysctl networking values on A4x-max machine type only.
Feature Reverted iproute2 to v5.16.0.
Fixed Upgraded net-misc/rsync to v3.4.1-r3.
Fixed Upgraded sys-apps/hwdata to v0.401.
Fixed Upgraded virtual/logger to v0-r3.
Security Fixed CVE-2026-23343 in the Linux kernel.

## April 06, 2026

Change

### cos-125-19216-220-117

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.68](https://cos.googlesource.com/third_party/kernel/+/f66bf9eb15aea83cae027143806b6af01481c296) | v27.5.1 | v2.1.5 | [See List](https://storage.googleapis.com/cos-tools/19216.220.117/lakitu/gpu_driver_versions.textproto) |

Change Made it so that /dev/hugepages is mounted as noexec for cchost boards.
Change Made it so that /mnt/disks is mounted as noexec for cchost boards.
Change Made it so that /run is mounted as noexec for cchost boards.
Change Upgraded sys-apps/iproute2 to version 6.18.0.
Fixed Fixed a kernel panic in virtio_pci teardown when virtually queues are conditionally skipped.
Security Fixed CVE-2024-14027 in the Linux kernel.
Security Fixed CVE-2026-23270 in the Linux kernel.
Security Fixed CVE-2026-23304 in the Linux kernel.
Security Fixed CVE-2026-33997 and CVE-2026-34040 in Docker.
Security Fixed KCTF-7cb9a23 in the Linux kernel.

## April 01, 2026

Change

### cos-125-19216-220-106

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.68](https://cos.googlesource.com/third_party/kernel/+/ff3a3595bc985d25661d470eab88dd46aa459d98) | v27.5.1 | v2.1.5 | [See List](https://storage.googleapis.com/cos-tools/19216.220.106/lakitu/gpu_driver_versions.textproto) |

Security Fixed CVE-2024-14027 in the Linux kernel.
Security Fixed CVE-2026-23304 in the Linux kernel.
Security Fixed KCTF-7cb9a23 in the Linux kernel.

## March 30, 2026

Change

### cos-125-19216-220-99

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.68](https://cos.googlesource.com/third_party/kernel/+/bcbb125a5a57da7523992b266b4f07d3510bd0de) | v27.5.1 | v2.1.5 | [See List](https://storage.googleapis.com/cos-tools/19216.220.99/lakitu/gpu_driver_versions.textproto) |

Feature Enabled dynamic configuration of FUSE max pages limit.
Security Fixed CVE-2026-23292 in the Linux kernel.
Security Fixed CVE-2026-23293 in the Linux kernel.
Security Fixed CVE-2026-23296 in the Linux kernel.
Security Fixed CVE-2026-23297 in the Linux kernel.
Security Fixed CVE-2026-23300 in the Linux kernel.
Security Fixed CVE-2026-23303 in the Linux kernel.
Security Fixed CVE-2026-23310 in the Linux kernel.
Security Fixed CVE-2026-23316 in the Linux kernel.
Security Fixed CVE-2026-23319 in the Linux kernel.
Security Fixed CVE-2026-23340 in the Linux kernel.
Security Fixed CVE-2026-23352 in the Linux kernel.
Security Fixed CVE-2026-23359 in the Linux kernel.
Security Fixed CVE-2026-23360 in the Linux kernel.
Security Fixed CVE-2026-23380 in the Linux kernel.
Security Fixed CVE-2026-23381 in the Linux kernel.
Security Fixed CVE-2026-23383 in the Linux kernel.
Security Fixed CVE-2026-23388 in the Linux kernel.
Security Fixed CVE-2026-23390 in the Linux kernel.
Security Fixed CVE-2026-27135 in net-libs/nghttp2.
Security Fixed CVE-2026-27448 in dev-python/pyopenssl.
Security Fixed CVE-2026-27459 in dev-python/pyopenssl.
Security Fixed KCTF-9df9578 in the Linux kernel.
Change Runtime sysctl changes:

- Added: fs.fuse.max_pages_limit: 256

<br />

## March 25, 2026

Change

### cos-125-19216-220-87

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.68](https://cos.googlesource.com/third_party/kernel/+/98c1b6ad6f970918e8fe029d2ee331c556111ae3) | v27.5.1 | v2.1.5 | [See List](https://storage.googleapis.com/cos-tools/19216.220.87/lakitu/gpu_driver_versions.textproto) |

Change Added support for the Lustre 2.14.0_p249 drivers.
Feature Added support for loading the ublk kernel module.
Fixed Added CPU balloon support for Arm CPUs.
Fixed Upgraded app-admin/google-osconfig-agent to v20260119.00.
Fixed Upgraded sys-apps/file to v5.47-r1.
Security Fixed CVE-2025-71265 in the Linux kernel.
Security Fixed CVE-2025-71266 in the Linux kernel.
Security Fixed CVE-2025-71267 in the Linux kernel.
Security Fixed CVE-2025-71268 in the Linux kernel.
Security Fixed CVE-2026-23243 in the Linux kernel.
Security Fixed CVE-2026-23254 in the Linux kernel.
Security Fixed CVE-2026-23262 in the Linux kernel.
Security Fixed CVE-2026-32597 with pyjwt package upgrade to 2.12.1.
Security Fixed KCTF-329f0b9 in the Linux kernel.
Security Fixed KCTF-c9bc175 in the Linux kernel.
Security Updated net-misc/curl to v8.19.0. This resolves CVE-2026-1965 and CVE-2026-3783.
Security Updated sys-libs/binutils-libs to 2.46.0. This resolves CVE-2025-69644.
Change Runtime sysctl changes:

- Changed: net.ipv4.udp_mem: 188034 250714 376068 -\> 188034 250715 376068

<br />

## March 23, 2026

Change

### cos-125-19216-220-72

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.68](https://cos.googlesource.com/third_party/kernel/+/6df21e3fc3957bf2dc7eeb7d8e703fc57b1e07ac) | v27.5.1 | v2.1.5 | [See List](https://storage.googleapis.com/cos-tools/19216.220.72/lakitu/gpu_driver_versions.textproto) |

Change Added support for the Lustre 2.14.0_p249 drivers.
Fixed Added CPU balloon support for Arm CPUs.
Fixed Upgraded app-admin/google-osconfig-agent to v20260119.00.
Fixed Upgraded sys-apps/file to v5.47-r1.
Security Fixed CVE-2025-71265 in the Linux kernel.
Security Fixed CVE-2025-71266 in the Linux kernel.
Security Fixed CVE-2025-71267 in the Linux kernel.
Security Fixed CVE-2025-71268 in the Linux kernel.
Security Fixed CVE-2026-23243 in the Linux kernel.
Security Fixed CVE-2026-23254 in the Linux kernel.
Security Fixed CVE-2026-23262 in the Linux kernel.
Security Updated net-misc/curl to v8.19.0. This resolves CVE-2026-1965 and CVE-2026-3783.
Security Updated sys-libs/binutils-libs to 2.46.0. This resolves CVE-2025-69644.
Change Runtime sysctl changes:

- Changed: net.ipv4.udp_mem: 188034 250714 376068 -\> 188034 250715 376068

<br />

## March 14, 2026

Change

### cos-125-19216-220-57

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.68](https://cos.googlesource.com/third_party/kernel/+/92c9f3ce0777cb6759e4c8a66adac2583c5ba3a8) | v27.5.1 | v2.1.5 | [See List](https://storage.googleapis.com/cos-tools/19216.220.57/lakitu/gpu_driver_versions.textproto) |

Change Fixed the "CrackArmor" vulnerability in the Linux kernel.
Fixed Downgraded ek-cpu-balloon driver to version 1.1.0 to address efficiency daemon issues.

## March 08, 2026

Change

### cos-125-19216-220-43

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.68](https://cos.googlesource.com/third_party/kernel/+/7eb31713b3fb44138b65643ab9d3037e22d29e47) | v27.5.1 | v2.1.5 | [See List](https://storage.googleapis.com/cos-tools/19216.220.43/lakitu/gpu_driver_versions.textproto) |

Change Updated cos-gpu-installer to v2.6.0.
Fixed Upgraded app-admin/node-problem-detector to v0.8.25.
Change Runtime sysctl changes:

- Changed: net.ipv4.udp_mem: 188034 250714 376068 -\> 188034 250715 376068

<br />

## March 07, 2026

Change

### cos-125-19216-220-39

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.68](https://cos.googlesource.com/third_party/kernel/+/7eb31713b3fb44138b65643ab9d3037e22d29e47) | v27.5.1 | v2.1.5 | [See List](https://storage.googleapis.com/cos-tools/19216.220.39/lakitu/gpu_driver_versions.textproto) |

Fixed Fixed a kernel bug which could cause traffic drops after NIC resets.
Change Runtime sysctl changes:

- Changed: net.ipv4.udp_mem: 188034 250715 376068 -\> 188034 250714 376068

<br />

## March 06, 2026

Change

### cos-125-19216-220-38

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.68](https://cos.googlesource.com/third_party/kernel/+/7eb31713b3fb44138b65643ab9d3037e22d29e47) | v27.5.1 | v2.1.5 | [See List](https://storage.googleapis.com/cos-tools/19216.220.38/lakitu/gpu_driver_versions.textproto) |

Security Fixed CVE-2026-23100 in the Linux kernel.
Change Runtime sysctl changes:

- Changed: net.ipv4.udp_mem: 188034 250715 376068 -\> 188034 250714 376068

<br />

## March 04, 2026

Change

### cos-125-19216-220-34

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.68](https://cos.googlesource.com/third_party/kernel/+/8ae4fb3efb4e9b9c6276d3c9247c7a123a73fca6) | v27.5.1 | v2.1.5 | [See List](https://storage.googleapis.com/cos-tools/19216.220.34/lakitu/gpu_driver_versions.textproto) |

Change Added support for the Lustre 2.14.0_p246 drivers.
Fixed Upgraded dev-util/gdbus-codegen to v2.86.3.
Fixed Upgraded the galog version to v0.0.0-20250924170816-9dbf105986f4 in google-guest-agent to fix an issue with high CPU consumption.
Security Fixed CVE-2026-23204 in the Linux kernel.
Security Fixed CVE-2026-23229 in the Linux kernel.
Security Fixed CVE-2026-23230 in the Linux kernel.
Security Upgraded dev-libs/glib to v2.86.3. This fixes
CVE-2025-14087, CVE-2025-14512 and CVE-2025-13601.

## February 24, 2026

Change

### cos-125-19216-220-24

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.68](https://cos.googlesource.com/third_party/kernel/+/53881952835848fbf440de93baf50cf22f1e4785) | v27.5.1 | v2.1.5 | [See List](https://storage.googleapis.com/cos-tools/19216.220.24/lakitu/gpu_driver_versions.textproto) |

Change Fixed CVE-2026-23177 in the Linux kernel.
Feature Added support for 590.44.01 and 590.48.01 NVIDIA driver for NVIDIA_RTX_PRO_6000
Fixed Added support for NVIDIA driver v580.126.09-grid for NVIDIA_RTX_PRO_6000 GPU type.
Fixed Upgraded app-admin/sosreport to v4.11.0.
Fixed Upgraded net-misc/rsync to v3.4.1-r2.
Fixed Upgraded net-misc/socat to v1.8.1.1.
Fixed Upgraded sys-apps/less to v692.
Security Fixed CVE-2025-15281 and CVE-2026-0861 in sys-libs/glibc.
Security Fixed CVE-2025-47912, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61726, and CVE-2025-61728 in dev-lang/go.
Security Fixed CVE-2025-60753 in libarchive.
Security Fixed CVE-2025-71225 in the Linux kernel.
Security Fixed CVE-2026-23112 in the Linux kernel.
Security Fixed CVE-2026-23148 in the Linux kernel.
Security Fixed CVE-2026-23154 in the Linux kernel.
Security Fixed CVE-2026-23156 in the Linux kernel.
Security Fixed CVE-2026-23159 in the Linux kernel.
Security Fixed CVE-2026-23161 in the Linux kernel.
Security Fixed CVE-2026-23168 in the Linux kernel.
Security Fixed CVE-2026-23173 in the Linux kernel.
Security Fixed CVE-2026-23179 in the Linux kernel.
Security Fixed CVE-2026-23193 in the Linux kernel.
Security Fixed CVE-2026-23198 in the Linux kernel.
Security Fixed CVE-2026-23199 in the Linux kernel.
Security Fixed CVE-2026-23200 in the Linux kernel.
Security Fixed CVE-2026-23205 in the Linux kernel.
Security Fixed CVE-2026-23212 in the Linux kernel.
Security Fixed CVE-2026-23214 in the Linux kernel.
Security Fixed CVE-2026-23215 in the Linux kernel.
Security Fixed CVE-2026-23216 in the Linux kernel.
Security Fixed CVE-2026-23219 in the Linux kernel.
Security Fixed KCTF-e3f000f in the Linux kernel.
Security Fixed KCTF-f41c5d1 in the Linux kernel.
Security Upgraded net-misc/curl to version 8.18.0. This fixes CVE-2025-10148, CVE-2025-10966, CVE-2025-13034, CVE-2025-14017, CVE-2025-14524, CVE-2025-14819, CVE-2025-15079, and CVE-2025-15224.

## February 19, 2026

Change

### cos-125-19216-220-9

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.68](https://cos.googlesource.com/third_party/kernel/+/0f7fdc11309c4368bee6047b0946cf23a718ec27) | v27.5.1 | v2.1.5 | [See List](https://storage.googleapis.com/cos-tools/19216.220.9/lakitu/gpu_driver_versions.textproto) |

Announcement This is an [LTS Refresh release.](https://docs.cloud.google.com/container-optimized-os/docs/concepts/versioning.md.txt#lts_refresh_releases)
Feature Added CPU balloon support for Arm CPUs.
Feature Added guest support for paravirtualization of cpuids on Arm machines.
Fixed Upgraded app-containers/docker-registry-test to v2.8.3.
Fixed Upgraded dev-libs/expat to v2.7.3.
Fixed Upgraded google-guest-configs to v20260121.00.
Fixed Upgraded net-libs/libtirpc to v1.3.7.
Fixed Upgraded net-misc/socat to v1.8.1.0-r1.
Fixed Upgraded net-nds/rpcbind to v1.2.8.
Fixed Upgraded sys-apps/gentoo-functions to v1.7.4.
Fixed Upgraded sys-auth/pambase to v20251104.
Fixed Upgraded sys-libs/libcap to v2.77.
Security Fixed KCTF-f8db647 in the Linux kernel.
Change Runtime sysctl changes:

- Changed: kernel.tainted: 4608 -\> 4096

<br />

## February 10, 2026

Change

### cos-125-19216-104-149

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.55](https://cos.googlesource.com/third_party/kernel/+/1b1e2b01ac575e6ecc5a3a83615620cc2fd27c45) | v27.5.1 | v2.1.5 | [See List](https://storage.googleapis.com/cos-tools/19216.104.149/lakitu/gpu_driver_versions.textproto) |

Fixed Fixed TCPX performance issues.
Feature Added support for NVIDIA driver v535.288.01, v570.211.01 and v580.126.09.
Feature Enabled TC Traffic Police as a module.
Security Fixed CVE-2025-71183 in the Linux kernel.
Security Fixed CVE-2026-23023 in the Linux kernel.
Security Fixed CVE-2026-23038 in the Linux kernel.

## February 03, 2026

Change

### cos-125-19216-104-133

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.55](https://cos.googlesource.com/third_party/kernel/+/d79e2a3f722af5d20208d089d7da9b07124ea6a7) | v27.5.1 | v2.1.5 | [See List](https://storage.googleapis.com/cos-tools/19216.104.133/lakitu/gpu_driver_versions.textproto) |

Security Fixed CVE-2025-38591 in the Linux kernel.
Security Fixed CVE-2025-40149 in the Linux kernel.
Security Fixed CVE-2025-71148 in the Linux kernel.
Security Fixed CVE-2025-71149 in the Linux kernel.
Security Fixed CVE-2025-71151 in the Linux kernel.
Security Fixed CVE-2025-71156 in the Linux kernel.
Security Fixed CVE-2025-71157 in the Linux kernel.
Security Fixed CVE-2025-71160 in the Linux kernel.
Security Fixed CVE-2026-0915 in sys-apps/glibc.
Security Fixed CVE-2026-22976 in the Linux kernel.
Security Fixed CVE-2026-22977 in the Linux kernel.
Security Fixed CVE-2026-22979 in the Linux kernel.
Security Fixed CVE-2026-22980 in the Linux kernel.
Security Fixed CVE-2026-22988 in the Linux kernel.
Security Fixed CVE-2026-22989 in the Linux kernel.
Security Fixed CVE-2026-22994 in the Linux kernel.
Security Fixed CVE-2026-22996 in the Linux kernel.
Security Fixed CVE-2026-22998 in the Linux kernel.
Security Fixed CVE-2026-22999 in the Linux kernel.
Security Fixed CVE-2026-23000 in the Linux kernel.
Security Fixed CVE-2026-23001 in the Linux kernel.
Security Fixed CVE-2026-23002 in the Linux kernel.
Security Fixed CVE-2026-23003 in the Linux kernel.
Security Fixed CVE-2026-23005 in the Linux kernel.
Security Fixed CVE-2026-23010 in the Linux kernel.
Security Fixed CVE-2026-23011 in the Linux kernel.
Security Fixed KCTF-2397e92 in the Linux kernel.
Security Fixed KCTF-50da4b9 in the Linux kernel.
Change Runtime sysctl changes:

- Changed: kernel.tainted: 4096 -\> 4608

<br />

## January 28, 2026

Change

### cos-125-19216-104-126

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.55](https://cos.googlesource.com/third_party/kernel/+/46c2d01887bed5038cc2b8bbd801ae2f7985e7f0) | v27.5.1 | v2.1.5 | [See List](https://storage.googleapis.com/cos-tools/19216.104.126/lakitu/gpu_driver_versions.textproto) |

Fixed Upgraded app-admin/sosreport to v4.10.2.
Fixed Upgraded sys-apps/less to v691.
Security Fixed CVE-2025-13836 in dev-lang/python.
Security Fixed CVE-2026-21441 in dev-python/urllib3.
Security Updated dev-libs/openssl to v3.5.5. This resolves CVE-2025-15467.

## January 23, 2026

Change

### cos-125-19216-104-117

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.55](https://cos.googlesource.com/third_party/kernel/+/fc34d54f830a07ff0b7ee3b4f6273acf2d6099de) | v27.5.1 | v2.1.5 | [See List](https://storage.googleapis.com/cos-tools/19216.104.117/lakitu/gpu_driver_versions.textproto) |

Fixed Fixed a performance issue in TCPX.
Security Fixed CVE-2025-13837 in dev-lang/python.
Security Fixed CVE-2025-71141 in the Linux kernel.

## January 20, 2026

Change

### cos-125-19216-104-113

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.55](https://cos.googlesource.com/third_party/kernel/+/c3275d29487cb867b01fadabaae9e498686a1ad3) | v27.5.1 | v2.1.5 | [See List](https://storage.googleapis.com/cos-tools/19216.104.113/lakitu/gpu_driver_versions.textproto) |

Security Applied urllib3 patch for CVE-2024-37891.
Change Applied ethtool ring length changes to a4x's first Diorite interface.
Fixed Updated dev-libs/openssl to v3.5.4.
Feature Enabled guest support for NVIDIA virtual command queues (CMDQV).
Fixed Updated cos-gpu-installer to v2.5.10.
Security Fixed CVE-2025-12084 in dev-lang/python.
Security Fixed CVE-2025-22111 in the Linux kernel.
Security Fixed CVE-2025-38234 in the Linux kernel.
Security Fixed CVE-2025-40325 in the Linux kernel.
Security Fixed CVE-2025-61727 in dev-lang/go.
Security Fixed CVE-2025-61729 in dev-lang/go.
Security Fixed CVE-2025-68206 in the Linux kernel.
Security Fixed CVE-2025-68259 in the Linux kernel.
Security Fixed CVE-2025-68261 in the Linux kernel.
Security Fixed CVE-2025-68264 in the Linux kernel.
Security Fixed CVE-2025-68265 in the Linux kernel.
Security Fixed CVE-2025-68337 in the Linux kernel.
Security Fixed CVE-2025-68348 in the Linux kernel.
Security Fixed CVE-2025-68349 in the Linux kernel.
Security Fixed CVE-2025-68363 in the Linux kernel.
Security Fixed CVE-2025-68366 in the Linux kernel.
Security Fixed CVE-2025-68369 in the Linux kernel.
Security Fixed CVE-2025-68372 in the Linux kernel.
Security Fixed CVE-2025-68374 in the Linux kernel.
Security Fixed CVE-2025-68724 in the Linux kernel.
Security Fixed CVE-2025-68727 in the Linux kernel.
Security Fixed CVE-2025-68728 in the Linux kernel.
Security Fixed CVE-2025-68740 in the Linux kernel.
Security Fixed CVE-2025-68742 in the Linux kernel.
Security Fixed CVE-2025-68744 in the Linux kernel.
Security Fixed CVE-2025-68775 in the Linux kernel.
Security Fixed CVE-2025-68778 in the Linux kernel.
Security Fixed CVE-2025-68780 in the Linux kernel.
Security Fixed CVE-2025-68782 in the Linux kernel.
Security Fixed CVE-2025-68788 in the Linux kernel.
Security Fixed CVE-2025-68794 in the Linux kernel.
Security Fixed CVE-2025-68795 in the Linux kernel.
Security Fixed CVE-2025-68798 in the Linux kernel.
Security Fixed CVE-2025-68800 in the Linux kernel.
Security Fixed CVE-2025-68801 in the Linux kernel.
Security Fixed CVE-2025-68803 in the Linux kernel.
Security Fixed CVE-2025-68810 in the Linux kernel.
Security Fixed CVE-2025-68811 in the Linux kernel.
Security Fixed CVE-2025-68813 in the Linux kernel.
Security Fixed CVE-2025-68814 in the Linux kernel.
Security Fixed CVE-2025-68816 in the Linux kernel.
Security Fixed CVE-2025-68820 in the Linux kernel.
Security Fixed CVE-2025-68821 in the Linux kernel.
Security Fixed CVE-2025-71067 in the Linux kernel.
Security Fixed CVE-2025-71068 in the Linux kernel.
Security Fixed CVE-2025-71072 in the Linux kernel.
Security Fixed CVE-2025-71077 in the Linux kernel.
Security Fixed CVE-2025-71080 in the Linux kernel.
Security Fixed CVE-2025-71084 in the Linux kernel.
Security Fixed CVE-2025-71089 in the Linux kernel.
Security Fixed CVE-2025-71096 in the Linux kernel.
Security Fixed CVE-2025-71097 in the Linux kernel.
Security Fixed CVE-2025-71098 in the Linux kernel.
Security Fixed CVE-2025-71102 in the Linux kernel.
Security Fixed CVE-2025-71104 in the Linux kernel.
Security Fixed CVE-2025-71113 in the Linux kernel.
Security Fixed CVE-2025-71118 in the Linux kernel.
Security Fixed CVE-2025-71120 in the Linux kernel.
Security Fixed CVE-2025-71123 in the Linux kernel.
Security Fixed CVE-2025-71125 in the Linux kernel.
Security Fixed CVE-2025-71131 in the Linux kernel.
Security Fixed CVE-2025-71134 in the Linux kernel.
Security Fixed CVE-2025-71135 in the Linux kernel.

## January 14, 2026

Change

### cos-125-19216-104-95

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.55](https://cos.googlesource.com/third_party/kernel/+/740cba961383c7ac618ea6c083b09027ec1c786b) | v27.5.1 | v2.1.5 | [See List](https://storage.googleapis.com/cos-tools/19216.104.95/lakitu/gpu_driver_versions.textproto) |

Security Fixed CVE-2025-40350 in the Linux kernel.
Security Fixed CVE-2025-40350 in the Linux kernel.
Security Fixed CVE-2025-40350 in the Linux kernel.
Security Fixed CVE-2025-68329 in the Linux kernel.
Security Fixed CVE-2025-68756 in the Linux kernel.
Security Fixed CVE-2025-68758 in the Linux kernel.
Security Fixed CVE-2025-68763 in the Linux kernel.
Security Fixed CVE-2025-68764 in the Linux kernel.
Security Fixed CVE-2025-68766 in the Linux kernel.
Change Runtime sysctl changes:

- Changed: net.ipv4.udp_mem: 188034 250714 376068 -\> 188034 250715 376068

<br />

## January 05, 2026

Change

### cos-125-19216-104-89

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.55](https://cos.googlesource.com/third_party/kernel/+/d3f94ae8cf5edcf8f0b51e6d49a1715adc182c06) | v27.5.1 | v2.1.5 | [See List](https://storage.googleapis.com/cos-tools/19216.104.89/lakitu/gpu_driver_versions.textproto) |

Change Updated app-admin/sosreport to v4.10.1. Enabled containerd stack dump by default.
Fixed Upgraded net-misc/socat to v1.8.1.0.
Fixed Upgraded sys-apps/dmidecode to v3.7.
Security Fixed CVE-2025-40346 in the Linux kernel.
Security Fixed CVE-2025-40348 in the Linux kernel.
Security Fixed CVE-2025-40353 in the Linux kernel.
Security Fixed CVE-2025-40359 in the Linux kernel.
Security Fixed CVE-2025-40360 in the Linux kernel.
Security Fixed CVE-2025-40361 in the Linux kernel.
Security Fixed CVE-2025-66471 and CVE-2025-66418 in dev-python/urllib3.
Security Fixed CVE-2025-68171 in the Linux kernel.
Security Fixed CVE-2025-68173 in the Linux kernel.
Security Fixed CVE-2025-68178 in the Linux kernel.
Security Fixed CVE-2025-68183 in the Linux kernel.
Security Fixed CVE-2025-68185 in the Linux kernel.
Security Fixed CVE-2025-68186 in the Linux kernel.
Security Fixed CVE-2025-68188 in the Linux kernel.
Security Fixed CVE-2025-68191 in the Linux kernel.
Security Fixed CVE-2025-68198 in the Linux kernel.
Security Fixed CVE-2025-68199 in the Linux kernel.
Security Fixed CVE-2025-68200 in the Linux kernel.
Security Fixed CVE-2025-68208 in the Linux kernel.
Security Fixed CVE-2025-68213 in the Linux kernel.
Security Fixed CVE-2025-68214 in the Linux kernel.
Security Fixed CVE-2025-68219 in the Linux kernel.
Security Fixed CVE-2025-68224 in the Linux kernel.
Security Fixed CVE-2025-68229 in the Linux kernel.
Security Fixed CVE-2025-68231 in the Linux kernel.
Security Fixed CVE-2025-68241 in the Linux kernel.
Security Fixed CVE-2025-68242 in the Linux kernel.
Security Fixed CVE-2025-68292 in the Linux kernel.
Security Fixed CVE-2025-68293 in the Linux kernel.
Security Fixed CVE-2025-68295 in the Linux kernel.
Security Fixed CVE-2025-68313 in the Linux kernel.
Security Fixed CVE-2025-68317 in the Linux kernel.
Security Fixed CVE-2025-68321 in the Linux kernel.
Security Fixed CVE-2025-68324 in the Linux kernel.
Security Fixed CVE-2025-68325 in the Linux kernel.
Change Runtime sysctl changes:

- Changed: fs.file-max: 811475 -\> 811504
- Changed: net.ipv4.udp_mem: 188034 250715 376068 -\> 188034 250714 376068

<br />

## December 16, 2025

Change

### cos-125-19216-104-74

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.55](https://cos.googlesource.com/third_party/kernel/+/49d1312ab9c199f2057b78dfaca25ece0281535d) | v27.5.1 | v2.1.5 | [See List](https://storage.googleapis.com/cos-tools/19216.104.74/lakitu/gpu_driver_versions.textproto) |

Fixed Backported upstream commit to reduce bcache gc latency.
Security Fixed KCTF-f05a4f9 in the Linux kernel.
Change Runtime sysctl changes:

- Changed: fs.file-max: 811448 -\> 811475

<br />

## December 15, 2025

Change

### cos-125-19216-104-72

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.55](https://cos.googlesource.com/third_party/kernel/+/e2523dd07b96cc75b0940a20895e40e1211f3d29) | v27.5.1 | v2.1.5 | [See List](https://storage.googleapis.com/cos-tools/19216.104.72/lakitu/gpu_driver_versions.textproto) |

Security Fixed CVE-2025-40231 in the Linux kernel.
Security Fixed CVE-2025-40238 in the Linux kernel.
Security Fixed CVE-2025-40248 in the Linux kernel.
Security Fixed CVE-2025-40256 in the Linux kernel.
Security Fixed CVE-2025-40292 in the Linux kernel.
Security Fixed CVE-2025-40297 in the Linux kernel.
Security Fixed CVE-2025-40303 in the Linux kernel.
Security Fixed CVE-2025-40305 in the Linux kernel.
Security Fixed CVE-2025-40313 in the Linux kernel.
Security Fixed CVE-2025-40319 in the Linux kernel.
Security Fixed CVE-2025-40320 in the Linux kernel.
Security Fixed CVE-2025-40324 in the Linux kernel.
Security Fixed CVE-2025-40328 in the Linux kernel.
Security Fixed CVE-2025-40341 in the Linux kernel.
Security Fixed CVE-2025-47914 and CVE-2025-58181 in dev-go/crypto.
Security Updated app-containers/containerd and app-containers/containerd-test to v2.1.5. This resolves CVE-2024-25621 and CVE-2025-64329.
Change Runtime sysctl changes:

- Changed: fs.file-max: 811449 -\> 811448

<br />

## December 10, 2025

Change

### cos-125-19216-104-61

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.55](https://cos.googlesource.com/third_party/kernel/+/e90029a23eafe4fcb53799d708139b1a8c5e8151) | v27.5.1 | v2.1.4 | [See List](https://storage.googleapis.com/cos-tools/19216.104.61/lakitu/gpu_driver_versions.textproto) |

Feature Added patches to handle IDPF tx timeouts.
Feature Enabled automatic loading of RDMA kernel modules when CX-8 devices are detected.
Fixed Upgraded app-admin/google-guest-configs to v20251014.00.
Security Fixed CVE-2025-38678 in the Linux kernel.
Security Fixed CVE-2025-40209 in the Linux kernel.
Security Fixed CVE-2025-40230 in the Linux kernel.
Security Fixed CVE-2025-40235 in the Linux kernel.
Security Fixed CVE-2025-40250 in the Linux kernel.
Security Fixed CVE-2025-40251 in the Linux kernel.
Security Fixed CVE-2025-40266 in the Linux kernel.
Security Fixed CVE-2025-40268 in the Linux kernel.
Security Fixed CVE-2025-40271 in the Linux kernel.
Security Fixed CVE-2025-40272 in the Linux kernel.
Security Fixed CVE-2025-40273 in the Linux kernel.
Change Runtime sysctl changes:

- Changed: fs.file-max: 811530 -\> 811449

<br />

## December 03, 2025

Change

### cos-125-19216-104-45

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.55](https://cos.googlesource.com/third_party/kernel/+/907f3d47b4cd729b87de8f40712f7f4d92c1e0ae) | v27.5.1 | v2.1.4 | [See List](https://storage.googleapis.com/cos-tools/19216.104.45/lakitu/gpu_driver_versions.textproto) |

Feature Added support for NVIDIA driver v580.105.08 and set it as the default version for all GPU types.
Fixed Made the google-guest-agent more resilient to network link
flakes.
Security Upgraded vim \& vim-core to version 9.1.1652. This fixes
CVE-2025-53905, CVE-2025-53906, CVE-2025-9390.
Change Runtime sysctl changes:

- Changed: fs.file-max: 811428 -\> 811530
- Changed: net.ipv4.udp_mem: 188034 250714 376068 -\> 188034 250715 376068

<br />

## December 02, 2025

Change

### cos-125-19216-104-39

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.55](https://cos.googlesource.com/third_party/kernel/+/cb6e9768e9e55a0b6bba71db534b817294b0a3e5) | v27.5.1 | v2.1.4 | [See List](https://storage.googleapis.com/cos-tools/19216.104.39/lakitu/gpu_driver_versions.textproto) |

Feature Enabled KVM for COS ARM64.
Feature Enabled Software Watchdog as a module.
Fixed Fixed an issue in app-containers/runc that caused runc to
use more file descriptors than intended.
Fixed Upgraded net-misc/rsync to v3.4.1-r1.
Security Fixed CVE-2025-22105 in the Linux kernel.
Security Fixed CVE-2025-40212 in the Linux kernel.
Security Fixed KCTF-60e6489 in the Linux Kernel.
Security Fixed KCTF-b441cf3 in the Linux kernel.
Change Runtime sysctl changes:

- Changed: fs.file-max: 811512 -\> 811428
- Changed: net.ipv4.udp_mem: 188034 250715 376068 -\> 188034 250714 376068

<br />

## November 17, 2025

Change

### cos-125-19216-104-25

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.55](https://cos.googlesource.com/third_party/kernel/+/25173adb441e4e80597a30870c7d83ef1aca88e3) | v27.5.1 | v2.1.4 | [See List](https://storage.googleapis.com/cos-tools/19216.104.25/lakitu/gpu_driver_versions.textproto) |

Fixed Backported various TCPDirect networking fixes.
Change Runtime sysctl changes:

- Changed: fs.file-max: 811458 -\> 811512

<br />

## November 14, 2025

Change

### cos-125-19216-104-23

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.55](https://cos.googlesource.com/third_party/kernel/+/cdbc4880641e7defb4cb9dfd3de70b19dc1531b7) | v27.5.1 | v2.1.4 | [See List](https://storage.googleapis.com/cos-tools/19216.104.23/lakitu/gpu_driver_versions.textproto) |

Change Updated app-containers/runc to v1.3.3.
Fixed Fixed a bug where setting MTU above 9000 on ARM systems with a 64k page size would cause IDPF networking to fail.
Change Runtime sysctl changes:

- Changed: fs.file-max: 811489 -\> 811458

<br />

## November 11, 2025

Change

### cos-125-19216-104-17

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.55](https://cos.googlesource.com/third_party/kernel/+/13ec0b222243e837d814745f08d4dc0a950c2cae) | v27.5.1 | v2.1.4 | [See List](https://storage.googleapis.com/cos-tools/19216.104.17/lakitu/gpu_driver_versions.textproto) |

Fixed Made CX-8 NIC naming order deterministic.
Feature Added support for SCSI logging.
Security Fixed CVE-2025-21833 in the Linux kernel.
Change Updated app-containers/containerd to v2.1.4.
Fixed Fixed a race condition where unmounting file systems monitored by inotify or fanotify could result in kernel crash.
Feature Enabled HTCP TCP congestion control algorithm as a module.
Fixed Upgraded sys-apps/makedumpfile to v1.7.8.
Change Runtime sysctl changes:

- Changed: fs.file-max: 811455 -\> 811489
- Changed: net.ipv4.udp_mem: 188034 250714 376068 -\> 188034 250715 376068

<br />

Feature Added support for the Lustre 2.14.0_p224 drivers.
Security Fixed CVE-2025-40083 in the Linux kernel.
Fixed Enabled multiport support for CX-8 devices.

## November 07, 2025

Change

### cos-125-19216-104-5

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.55](https://cos.googlesource.com/third_party/kernel/+/a87c94f53218718f1811c39c2e1a802d36f5e634) | v27.5.1 | v2.1.3 | [See List](https://storage.googleapis.com/cos-tools/19216.104.5/lakitu/gpu_driver_versions.textproto) |

Change Runtime sysctl changes:

- Changed: fs.file-max: 811499 -\> 811455

<br />

Security Fixed CVE-2025-31133, CVE-2025-52565, and CVE-2025-52881 in
app-containers/runc.
Fixed Fixed bcache latency spikes.

## November 03, 2025

Change

### cos-125-19216-104-3

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.55](https://cos.googlesource.com/third_party/kernel/+/1abebf8624cc7d4e8a9bb2bccff8f0dc031fd549) | v27.5.1 | v2.1.3 | [See List](https://storage.googleapis.com/cos-tools/19216.104.3/lakitu/gpu_driver_versions.textproto) |

Fixed Upgraded dev-lang/go to v1.23.12.
Change Runtime sysctl changes:

- Changed: fs.file-max: 811500 -\> 811499
- Changed: net.ipv4.udp_mem: 188034 250715 376068 -\> 188034 250714 376068

<br />

Announcement This is an LTS refresh release.
Security Fixed CVE-2025-40006 in the Linux kernel.
Feature Fixed a bug in cos-extensions which would cause GB200 and GB300 devices not to be detected in one code path, which would result in Imex channels not being created by default.
Fixed Fixed a TCPX bug which would sometimes incorrectly report devices as being missing when route cache entries were missing or invalidated.
Security Fixed CVE-2025-40009 in the Linux kernel.

## October 27, 2025

Change

### cos-125-19216-0-115

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.46](https://cos.googlesource.com/third_party/kernel/+/6bf8e7e2ed9d2fd0a8381ab1bd6e659b24b01807) | v27.5.1 | v2.1.3 | [See List](https://storage.googleapis.com/cos-tools/19216.0.115/lakitu/gpu_driver_versions.textproto) |

Feature Added GB300 support to cos-extensions.
Fixed Added support for NVIDIA driver v535.274.02 and v570.195.03.
Change Updated cos-gpu-installer to v2.5.9. This adds support for installing drivers for GB 300 devices.
Security Fixed CVE-2025-11413, CVE-2025-11414 in binutils-libs.
Fixed Upgraded sys-apps/pv to v1.9.44.

## October 24, 2025

Change

### cos-125-19216-0-110

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.46](https://cos.googlesource.com/third_party/kernel/+/6bf8e7e2ed9d2fd0a8381ab1bd6e659b24b01807) | v27.5.1 | v2.1.3 | [See List](https://storage.googleapis.com/cos-tools/19216.0.110/lakitu/gpu_driver_versions.textproto) |

Security Fixed CVE-2025-11495 in binutils-libs.
Change Runtime sysctl changes:

- Changed: net.ipv4.udp_mem: 188034 250714 376068 -\> 188034 250715 376068

<br />

Change Updated app-containers/runc to v1.2.7.
Security Fixed CVE-2025-11494 in binutils-libs.
Fixed Upgraded sys-apps/pv to v1.9.42.
Change Updated cos-gpu-installer to v2.5.8.
Security Fixed CVE-2025-11412 in binutils-libs.
Feature Added support for NVIDIA GB300 devices.
Fixed Reduced gcr_wait_online retry gap.
Fixed Upgraded sys-apps/less to v685.
Fixed Upgraded sys-apps/hwdata to v0.400.
Change Added support for A4X-Max NICs.

## October 20, 2025

Change

### cos-125-19216-0-100

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.46](https://cos.googlesource.com/third_party/kernel/+/6bf8e7e2ed9d2fd0a8381ab1bd6e659b24b01807) | v27.5.1 | v2.1.3 | [See List](https://storage.googleapis.com/cos-tools/19216.0.100/lakitu/gpu_driver_versions.textproto) |

Security Fixed CVE-2025-39984 in the Linux kernel.
Security Fixed CVE-2025-39998 in the Linux kernel.
Security Fixed CVE-2025-39975 in the Linux kernel.
Security Fixed CVE-2025-39971 in the Linux kernel.
Security Fixed CVE-2025-39972 in the Linux kernel.
Security Fixed CVE-2025-39969 in the Linux kernel.
Security Fixed CVE-2025-39940 in the Linux kernel.
Security Fixed CVE-2025-38322 in the Linux kernel.
Security Fixed CVE-2025-39990 in the Linux kernel.
Security Fixed CVE-2025-39973 in the Linux kernel.
Change Runtime sysctl changes:

- Changed: fs.file-max: 811534 -\> 811421
- Changed: net.ipv4.udp_mem: 188034 250715 376068 -\> 188034 250714 376068

<br />

Security Fixed CVE-2025-39980 in the Linux kernel.
Security Fixed CVE-2025-39977 in the Linux kernel.
Security Fixed CVE-2025-39992 in the Linux kernel.

## October 17, 2025

Change

### cos-125-19216-0-94

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.46](https://cos.googlesource.com/third_party/kernel/+/50e2212a52072ff4b0d0c40457be44291865fa70) | v27.5.1 | v2.1.3 | [See List](https://storage.googleapis.com/cos-tools/19216.0.94/lakitu/gpu_driver_versions.textproto) |

Fixed Added task information collection to sosreports.
Fixed Updated golang.org/x/crypto, golang.org/x/net, and
golang.org/x/oauth2 in kubelet and kubectl.
Security Fixed KCTF-6bb73db in the Linux Kernel.
Fixed Updated the dump capture kernel to v6.12.52.
Security Fixed CVE-2025-39963 in the Linux kernel.
Security Fixed CVE-2025-39965 in the Linux kernel.
Change Runtime sysctl changes:

- Changed: fs.file-max: 811514 -\> 811534
- Changed: net.ipv4.udp_mem: 188034 250714 376068 -\> 188034 250715 376068

<br />

Security Fixed CVE-2025-41244 in app-emulation/open-vm-tools.
Security Fixed CVE-2025-39961 in the Linux kernel.

## October 13, 2025

Change

### cos-125-19216-0-87

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.46](https://cos.googlesource.com/third_party/kernel/+/5ee1685d45ceceb19bdc81e90ae4e54c24ab561a) | v27.5.1 | v2.1.3 | [See List](https://storage.googleapis.com/cos-tools/19216.0.87/lakitu/gpu_driver_versions.textproto) |

Fixed Upgraded sys-apps/hwdata to v0.399.
Feature Added support for NVIDIA driver v580.95.05. Updated all latest driver version and default driver versions for NVIDIA_GB200 and NVIDIA_B200 to v580.95.05.
Security Fixed CVE-2025-39947 in the Linux kernel.
Security Fixed CVE-2025-39953 in the Linux kernel.
Change Runtime sysctl changes:

- Changed: fs.file-max: 811500 -\> 811514

<br />

Fixed Upgraded app-admin/node-problem-detector to v0.8.22.
Security Fixed CVE-2025-11081, CVE-2025-11082 and CVE-2025-11083 in sys-libs/binutils-libs.
Security Fixed CVE-2025-39931 in the Linux kernel.
Fixed Partially fixed an issue where excessive contention among writeback kworkers when switching a large number of inodes between cgroups could lead to system unresponsiveness.

## October 09, 2025

Change

### cos-125-19216-0-80

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.46](https://cos.googlesource.com/third_party/kernel/+/499c3487fad22aa2a6160db596030afb3de49edd) | v27.5.1 | v2.1.3 | [See List](https://storage.googleapis.com/cos-tools/19216.0.80/lakitu/gpu_driver_versions.textproto) |

Security Fixed KCTF-134121b in the Linux kernel.
Announcement Promoted Milestone 125 to stable.
Change Runtime sysctl changes:

- Changed: fs.file-max: 811450 -\> 811500
- Changed: net.ipv4.udp_mem: 188034 250715 376068 -\> 188034 250714 376068

<br />

Change Updated toolbox container image tag to v20251002.

## October 06, 2025

Change

### cos-beta-125-19216-0-76

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.46](https://cos.googlesource.com/third_party/kernel/+/63e0810f15dbfa9fb8126501f54ab3cfb234ca55) | v27.5.1 | v2.1.3 | [See List](https://storage.googleapis.com/cos-tools/19216.0.76/lakitu/gpu_driver_versions.textproto) |

Security Fixed KCTF-1b34cbb in the Linux kernel.
Fixed Add support for NVIDIA MFT Tools v4.33.0.
Security Fixed CVE-2025-39917 in the Linux kernel.
Security Fixed CVE-2025-39913 in the Linux kernel.
Security Fixed CVE-2025-22106 in the Linux kernel.
Security Fixed CVE-2025-39914 in the Linux kernel.
Change Runtime sysctl changes:

- Changed: fs.file-max: 811504 -\> 811450

<br />

Feature Configured the cos-gpu-installer to use R580 drivers as the
default GPU drivers.
Security Fixed CVE-2025-39886 in the Linux kernel.
Security Fixed CVE-2025-39911 in the Linux kernel.
Security Updated dev-python/jinja to v3.1.6. This resolves
CVE-2024-56326, CVE-2024-56201 and CVE-2025-27516.
Security Fixed CVE-2025-39926 in the Linux kernel.
Security Updated dev-python/urllib3 to v1.26.18 and fixed CVE-2025-50181.

## September 29, 2025

Change

### cos-beta-125-19216-0-62

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.46](https://cos.googlesource.com/third_party/kernel/+/96bbdbf724fadf236b71f17314bc6e716a7e2031) | v27.5.1 | v2.1.3 | [See List](https://storage.googleapis.com/cos-tools/19216.0.62/lakitu/gpu_driver_versions.textproto) |

Security Fixed CVE-2025-40300 in the Linux kernel.
Security Fixed CVE-2025-39883 in the Linux kernel.
Security Fixed CVE-2025-39881 in the Linux kernel.
Fixed Updated golang.org/x/oauth2, golang.org/x/net,
golang.org/x/crypto, and github.com/golang-jwt/jwt/v5 in Docker.
Fixed Updated app-admin/node-problem-detector to v0.8.21.
Security Fixed KCTF-0aeb54a in the Linux Kernel.
Security Fixed CVE-2025-39884 in the Linux kernel.
Security Fixed CVE-2025-39882 in the Linux kernel.

## September 24, 2025

Change

### cos-beta-125-19216-0-53

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.46](https://cos.googlesource.com/third_party/kernel/+/6963667c07329fd67fdfa97b2c039c916e93a348) | v27.5.1 | v2.1.3 | [See List](https://storage.googleapis.com/cos-tools/19216.0.53/lakitu/gpu_driver_versions.textproto) |

Fixed Added support for NVIDIA driver v580.82.07.
Updated all latest driver version and default driver
versions for NVIDIA_GB200 and NVIDIA_B200 to v580.82.07.
Change Enabled Coherent Driver Memory Management by default when installing GPU drivers on GB2000.
Feature Added support for the fwctl subsystem and the Mellanox fwctl driver for ARM64.
Change Updated cos-gpu-installer to v2.5.7.
Fixed Upgraded dev-libs/libxslt to version 1.1.43-r1.
Fixed Updated the Linux kernel to v6.12.46.
Security Upgraded dev-libs/libxml2 to version 2.13.9. This fixes
CVE-2025-9714.
Change Runtime sysctl changes:

- Changed: fs.file-max: 811500 -\> 811534

<br />

## September 16, 2025

Change

### cos-beta-125-19216-0-47

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.41](https://cos.googlesource.com/third_party/kernel/+/fcd7852f14840b42feeae954c5e2b8d5b3da6958) | v27.5.1 | v2.1.3 | [See List](https://storage.googleapis.com/cos-tools/19216.0.47/lakitu/gpu_driver_versions.textproto) |

Fixed Fixed a kernel bug which caused boot to fail for n4 machine types.
Security Fixed CVE-2025-38640 in the Linux kernel.
Feature Added GDRCopy kernel module for NVIDIA drivers.
Change Runtime sysctl changes:

- Changed: fs.file-max: 811507 -\> 811500

<br />

Security Fixed CVE-2025-38622 in the Linux kernel.
Security Fixed CVE-2025-38568 in the Linux kernel.
Feature Added support for NVIDIA MFT Tools on arm64.
Security Fixed CVE-2025-38572 in the Linux kernel.
Security Fixed CVE-2025-38608 in the Linux kernel.
Security Fixed CVE-2025-38587 in the Linux kernel.
Security Fixed CVE-2025-38565 in the Linux kernel.
Security Fixed CVE-2025-38645 in the Linux kernel.
Security Fixed CVE-2025-38614 in the Linux kernel.
Security Fixed CVE-2025-38588 in the Linux kernel.
Security Fixed CVE-2025-38639 in the Linux kernel.
Security Fixed CVE-2025-38571 in the Linux kernel.

## September 08, 2025

Change

### cos-beta-125-19216-0-38

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.41](https://cos.googlesource.com/third_party/kernel/+/15fd269cbaf8aa5f8f789db43e9a49c81fc9f3ab) | v27.5.1 | v2.1.3 | [See List](https://storage.googleapis.com/cos-tools/19216.0.38/lakitu/gpu_driver_versions.textproto) |

Feature Added NVIDIA GPU driver's R580 branch. Updated the LATEST GPU driver label to version 580.65.06.
Security Fixed CVE-2025-38676 in the Linux kernel.
Fixed Disabled network management by the google-guest-agent.
Change Runtime sysctl changes:

- Changed: fs.file-max: 811504 -\> 811507

<br />

## September 02, 2025

Change

### cos-beta-125-19216-0-33

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.41](https://cos.googlesource.com/third_party/kernel/+/63514cac0bb36911759fd907b87c654e5fed76d7) | v27.5.1 | v2.1.3 | [See List](https://storage.googleapis.com/cos-tools/19216.0.33/lakitu/gpu_driver_versions.textproto) |

Fixed Upgraded sys-apps/file to v5.46-r3.
Security Fixed KCTF-6db015f in the Linux kernel.
Feature Added iRDMA support in the Linux kernel.
Fixed Upgraded sys-apps/hwdata to v0.398.
Change Runtime sysctl changes:

- Changed: fs.file-max: 811541 -\> 811504

<br />

Feature Enabled dynamic vlan configuration for non-primary NICs.
Fixed Added support for the Lustre 2.14.0_p216 drivers.
Security Fixed CVE-2025-6052 in dev-libs/glib.
Security Fixed KCTF-aba0c94 in the Linux kernel.
Security Fixed KCTF-62708b9 in the Linux kernel.

## August 25, 2025

Change

### cos-beta-125-19216-0-24

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.41](https://cos.googlesource.com/third_party/kernel/+/02d39c3c0c9c42945d7d727b09fd66a344ac6fb8) | v27.5.1 | v2.1.3 | [See List](https://storage.googleapis.com/cos-tools/19216.0.24/lakitu/gpu_driver_versions.textproto) |

Feature Disabled DNSSEC by default for COS TPU VMs.
Feature Enabled the google-guest-agent's network management functionality.
Fixed Fixed an issue where cpusets cgroups did not work with
cgroup v1 enabled.
Feature Added IPv6 support for machines using the IDPF driver.
Fixed Installed app-misc/c_rehash.
Feature Removed the cloud-final.service dependency on multi-user.target which could delay cloud-init user-data scripts indefinitely when long-running startup scripts are used.
Change Added kernel support for bare-metal on the NVIDIA Grace platform.
Security Fixed KCTF-abad3d0 in the Linux kernel.
Change Runtime sysctl changes:

- Changed: fs.file-max: 811484 -\> 811541

<br />

Feature Added ConnectX-8 RDMA support.
Feature Added TDX RTMR support.

## August 18, 2025

Change

### cos-beta-125-19216-0-12

|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.12.41](https://cos.googlesource.com/third_party/kernel/+/cb97b1d56434861bfcd63c64497d0b8580f58508) | v27.5.1 | v2.1.3 | [See List](https://storage.googleapis.com/cos-tools/19216.0.12/lakitu/gpu_driver_versions.textproto) |

Security Fixed CVE-2024-53427 in app-misc/jq.
Fixed Upgraded app-arch/gzip to v1.14.
Feature Add support for iRDMA devices.
Security Update NVIDIA GPU drivers to v535.247.01 for default/ R535
and v570.133.20 for latest/R570. This resolves CVE-2025-23244.
Feature Added support for Nvidia driver version 575.57.08. Added support for NVIDIA_RTX_PRO_6000 devices.
Feature Supported NVIDIA MFT Tools on COS.
Security Upgraded dev-libs/glib to 2.82.5. This resolves
CVE-2024-52533.
Fixed Upgraded net-dns/libidn2 to v2.3.8.
Fixed Upgraded sys-apps/acl to v2.3.2-r2.
Fixed Upgraded sys-apps/which to v2.23.
Fixed Disabled martian logging for ConnectX-7 network cards. These cards only communicate locally, but martian logging during communications with the host can lead to a race condition which causes GID table construction to sometimes fail.
Fixed Upgraded sys-libs/libcap to v2.76.
Change Upgrade cloud-init to v24.4.1.
Security Fixed CVE-2025-8058 in glibc.
Security Fixed CVE-2025-0840 in binutils.
Security Upgraded dev-libs/libxml2 to v1.12.10. Fixes CVE-2025-27113.
Fixed Upgraded app-admin/node-problem-detector to v0.8.20.
Feature Added support for NVIDIA GB200 GPU with 570.124.06 GPU driver. This driver version has been assigned the latest, default, and R570 tags for this GPU type.
Fixed Upgraded chromeos-base/chromeos-common-script to v0.0.1-r667.
Fixed Updated app-misc/jq to v1.8.1.
Change Updated Python to v3.11.
Security Upgraded sys-libs/binutils-libs to version 2.45. This fixes CVE-2025-8224,CVE-2025-8225 and CVE-2025-1153.
Security Upgraded net-misc/netplan to v1.1.2. This fixes
CVE-2022-4968.
Change Upgraded the Linux kernel to version 6.12.
Fixed Upgraded sys-libs/libseccomp to v2.6.0-r2.
Fixed Fixed issue where modinfo could not display module signatures.
Fixed Upgraded sys-apps/rootdev to v0.0.1-r51.
Fixed Upgraded app-containers/runc to v1.2.5, Upgraded app-containers/runc-test to v1.2.5.
Security Fixed CVE-2024-26130 in dev-python/cryptography.
Fixed Upgraded chromeos-base/minijail to v18-r168.
Fixed Updated dev-python/s3transfer to v0.11.4.
Fixed Upgraded dev-libs/openssl to 3.5.1.
Fixed Increased kdump memory reservation.
Fixed Updated dev-python/requests to v2.32.4.
Change Restored standard upstream Linux kernel layout for `sessionid` and `loginuid` fields in `struct task_struct`.
Security Fixed CVE-2024-13176 in dev-libs/openssl.
Fixed Upgraded sys-process/lsof to v4.99.5.
Security Upgraded vim, vim-core to
version 9.1.1500. This fixes CVE-2025-26603, CVE-2025-27423,
CVE-2025-29768, CVE-2025-1215, CVE-2025-24014, CVE-2025-22134.
Security Upgrade libarchive to v3.8.1. This fixes CVE-2025-5914.
Feature Added ARM support for the Lustre v2.14.0 drivers.
Security Upgraded net-misc/curl to v8.12.1. This fixes CVE-2025-0167.
Fixed Upgraded sys-apps/makedumpfile to v1.7.7.
Fixed Upgraded chromeos-base/debugd-client to v0.0.1-r2734.
Fixed Upgraded sys-apps/less to v679.
Security Upgraded dev-go/crypto to v0.35.0. This fixes CVE-2025-22869.
Feature Fixed an issue in containerd that prevented some v2 shims from shutting down properly.
Change Patched a null ptr exception bug in NVIDIA 570.124.06 OSS driver.
Fixed Updated dev-python/botocore to v1.37.9.
Security Fixed CVE-2024-9287 in dev-lang/python.
Fixed Fixed EINTR error in app-container/cni-plugins.
Change Fixed an issue that resulted in missing grub boot measurements in some machine configurations.
Fixed Upgraded dev-libs/double-conversion to v3.3.1.
Fixed Upgraded app-arch/unzip to v6.0_p29.
Fixed Upgraded sys-apps/grep to v3.12.
Fixed Upgraded app-admin/google-guest-agent to v20250418.00.
Fixed Upgraded app-admin/google-guest-configs to v20250718.00.
Security Updated dev-go/net in policy manager to v0.39.0. This fixes CVE-2025-22870.
Fixed Upgraded sys-auth/pambase to v20250228.
Security Upgraded dev-vcs/git to version 2.49.1. This fixes CVE-2025-48385, CVE-2025-27613, CVE-2025-27614, CVE-2025-48384, CVE-2025-46835.
Fixed Upgraded sys-apps/diffutils to v3.11-r2.
Fixed Upgraded app-admin/fluent-bit to v3.2.5.
Fixed Upgraded sys-apps/dbus to v1.16.2-r197.
Change Upgrade dpdk-kmods to 9b182be2ee4b.
Feature Added NVIDIA 570.133.20 vGPU driver.
Change Updated the NVIDIA GPU driver policy for New Feature Branch (NFB) drivers. The LATEST tag has been updated to point to the stable 570.133.20 Production Branch. The 575.57.08 NFB driver remains available for development and testing but must now be selected by its specific version number.Removed 575.57.08 NFB driver support for NVIDIA_GB200 machine.
Fixed Upgraded chromeos-base/shill-client to v0.0.1-r4879.
Security Upgraded net-misc/wget to v1.25.0. This fixes CVE-2024-10524.
Feature Updated cos-gpu-installer to v2.4.8: Add the -skip-nvidia-smi flag to disable the execution of nvidia-smi verification during gpu driver installation.
Security Fixed CVE-2025-46836 in sys-apps/net-tools
Fixed Upgraded net-nds/rpcbind to v1.2.7.
Security Fixed CVE-2024-6174 and CVE-2024-11584 in cloud-init.
Security Fixed CVE-2025-32728 in net-misc/openssh.
Fixed Upgraded sys-apps/ethtool to version 6.11.
Fixed Upgraded net-misc/rsync to v3.4.1.
Security Added support for Nvidia driver version 535.261.03. This fixes CVE-2025-23286 and CVE-2025-23279.
Fixed Upgraded sys-process/procps to v4.0.5-r2.
Fixed Upgraded sys-apps/pv to v1.9.34.
Fixed Upgraded app-containers/docker-credential-helpers to v0.9.3.
Fixed Upgraded app-benchmarks/microbenchmarks to v0.0.1-r20.
Fixed Modified toolbox to use unified cgroup hierarchy mode instead of hybrid mode when possible.
Security Updated dev-go/oauth2 to v0.27.0. Fixes CVE-2025-22868.
Security Updated app-editors/nano to v8.5. This resolves
CVE-2024-5742.
Security Fixed CVE-2024-23337 in app-misc/jq.
Security Fixed CVE-2025-47273 in dev-python/setuptools.
Fixed Added support for the Lustre 2.14.0_p212 drivers.
Fixed Reverted a containerd change which reduced the default soft file descriptor limit for processes in containers to 1024.
Fixed Upgraded net-misc/socat to v1.8.0.3.
Change iptables-restore.service to start after ipset.service.
Fixed Upgraded net-misc/openssh to 10.0_p1.
Change Added support for 7th generation TPU devices.
Change Upgraded nvidia-container-toolkit to v1.17.8. This fixes CVE-2025-23266.
Security Upgraded elfutils to v0.193. This fixes CVE-2025-1365, CVE-2025-1371, CVE-2025-1372, and CVE-2025-1377.
Fixed Upgraded virtual/logger to v0-r2.
Security Fixed CVE-20250-3198 in sys-libs/bintuils-libs.
Fixed Fixed docker MTU mismatch.
Fixed Upgraded chromeos-base/session_manager-client to v0.0.1-r2830.
Fixed Upgraded chromeos-base/google-breakpad to v2025.07.23.214511-r244.
Feature Enabled the Btrfs kernel module.
Security Fixed CVE-2025-0395 in sys-libs/glibc.
Change Runtime sysctl changes:

- Added: kernel.apparmor_restrict_unprivileged_unconfined: 0
- Added: kernel.core_file_note_size_limit: 4194304
- Added: kernel.core_sort_vma: 0
- Added: net.ipv4.fib_multipath_hash_seed: 0
- Added: net.ipv4.tcp_pingpong_thresh: 1
- Added: net.ipv6.conf.all.ra_honor_pio_life: 0
- Added: net.ipv6.conf.all.ra_honor_pio_pflag: 0
- Added: net.ipv6.conf.all.regen_min_advance: 2
- Added: net.ipv6.conf.default.ra_honor_pio_life: 0
- Added: net.ipv6.conf.default.ra_honor_pio_pflag: 0
- Added: net.ipv6.conf.default.regen_min_advance: 2
- Added: net.ipv6.conf.docker0.ra_honor_pio_life: 0
- Added: net.ipv6.conf.docker0.ra_honor_pio_pflag: 0
- Added: net.ipv6.conf.docker0.regen_min_advance: 2
- Added: net.ipv6.conf.eth0.ra_honor_pio_life: 0
- Added: net.ipv6.conf.eth0.ra_honor_pio_pflag: 0
- Added: net.ipv6.conf.eth0.regen_min_advance: 2
- Added: net.ipv6.conf.lo.ra_honor_pio_life: 0
- Added: net.ipv6.conf.lo.ra_honor_pio_pflag: 0
- Added: net.ipv6.conf.lo.regen_min_advance: 2
- Added: vm.enable_soft_offline: 1
- Changed: fs.epoll.max_user_watches: 1809007 -\> 1808517
- Changed: fs.fanotify.max_user_marks: 67544 -\> 68412
- Changed: fs.file-max: 811774 -\> 811484
- Changed: fs.inotify.max_user_watches: 63425 -\> 64189
- Changed: kernel.threads-max: 63487 -\> 63178
- Changed: net.ipv4.tcp_mem: 94041 125391 188082 -\> 94017 125357 188034
- Changed: net.ipv4.udp_mem: 188085 250783 376170 -\> 188034 250715 376068
- Changed: user.max_cgroup_namespaces: 31743 -\> 31589
- Changed: user.max_fanotify_marks: 67544 -\> 68412
- Changed: user.max_inotify_watches: 63425 -\> 64189
- Changed: user.max_ipc_namespaces: 31743 -\> 31589
- Changed: user.max_mnt_namespaces: 31743 -\> 31589
- Changed: user.max_net_namespaces: 31743 -\> 31589
- Changed: user.max_pid_namespaces: 31743 -\> 31589
- Changed: user.max_time_namespaces: 31743 -\> 31589
- Changed: user.max_user_namespaces: 31743 -\> 31589
- Changed: user.max_uts_namespaces: 31743 -\> 31589
- Changed: vm.lowmem_reserve_ratio: 256 256 32 0 0 -\> 256 256 32 0
- Deleted: kernel.sched_child_runs_first: 0

<br />

Fixed Upgraded sysram to version 6.12-0.
Fixed Updated dev-python/python-dateutil to v2.9.0.
Feature Backported support for AMD SEV-SNP SVSM vTPM driver and
configfs-tsm addition for extended attestation protocol.
Fixed Upgraded chromeos-base/power_manager-client to v0.0.1-r2969.
Security Added support for Nvidia driver version 570.172.08. This fixes CVE-2025-23279.
Fixed Upgraded dev-libs/nss to v3.110.
Fixed Upgraded sys-apps/hwdata to v0.391.
Security Updated apparmor to v3.1.6. This fixes CVE-2016-1585.
Change Updated the default tag of the GPU driver supporting the NVIDIA H200 GPU device to 570.86.15.
Change Updated containerd to v2.1.3.
Fixed Upgraded chromeos-base/update_engine-client to v0.0.1-r2480.
Security Fixed CVE-2025-31498 in net-dns/c-ares.
Fixed Upgraded app-admin/sudo to v1.9.17_p2.
Feature Applied Intel patches to add iRDMA support in the Linux kernel.
Change Updated cos-gpu-installer to v2.5.5.
Security Updated systemd to v254.26. This resolves CVE-2025-4598.
Fixed Upgraded dev-db/sqlite to v3.50.3.
Feature Fixed an issue in containerd that potentially breaks metric collection.
Fixed Removed an artifact registry ping that would delay multi-user.target indefinitely for machines with no external IP address.
Change Upgraded app-containers/docker to v27.5.1, Upgraded app-containers/docker-test to v27.5.1, Upgraded app-containers/docker-cli to v27.5.1.
Security Fixed CVE-2024-48615 in app-arch/libarchive.
Security Patched openssl to fix CVE-2023-50782 affecting
dev-python/crytography.
Fixed Upgraded dev-libs/expat to v2.7.1.
Fixed Upgraded dev-lang/go to v1.23.11.
Security Fix CVE-2025-32414, CVE-2025-32415 in dev-libs/libxml2.
Feature Injected IMEX channel char device for GB200 GPUs.