Container-Optimized OS Release Notes: Milestone 125

You can see the latest product updates for all of Google Cloud on the Google Cloud page, browse and filter all release notes in the Google Cloud console, or programmatically access release notes in BigQuery.

To get the latest product updates delivered to you, add the URL of this page to your feed reader, or add the feed URL directly.

September 08, 2026

Change

cos-125-19216-655-12

Kernel Docker Containerd GPU Drivers
COS-6.12.105 v27.5.1 v2.2.7 See List
Fixed

Added support for NVIDIA driver v595.91.07.

Fixed

Fixed docker cp failure when copying to/from containers with symlinked bind mounts.

Fixed

Upgraded dev-db/sqlite to v3.53.4.

Security

Fixed CVE-2026-6238 in sys-libs/glibc.

Security

Updated dev-go/net to v0.55.0 to fix CVE-2026-25680.

Change

Runtime sysctl changes:

  • Changed: net.ipv4.udp_mem: 188034 250715 376068 -> 188034 250714 376068

August 31, 2026

Change

cos-125-19216-655-6

Kernel Docker Containerd GPU Drivers
COS-6.12.105 v27.5.1 v2.2.7 See List
Fixed

LTS Refresh from main-R125-cos-6.12 to release-R125-cos-6.12

Fixed

Upgraded app-arch/zstd to v1.5.7-r1.

Fixed

Upgraded app-containers/cni-plugins to v1.9.1.

Fixed

Upgraded dev-libs/libverto to v0.3.2-r1.

Fixed

Upgraded dev-libs/popt to v1.19-r1.

Fixed

Upgraded dev-libs/xxhash to v0.8.3-r2.

Fixed

Upgraded sys-auth/passwdqc to v2.0.3-r1.

Security

Fixed CVE-2026-68293 in the Linux kernel.

Security

Upgraded dev-libs/libxml2 to v2.15.3. This fixes CVE-2026-0989, CVE-2026-0990, and CVE-2026-0992.

Change

Runtime sysctl changes:

  • Changed: net.ipv4.udp_mem: 188034 250714 376068 -> 188034 250715 376068

August 24, 2026

Change

cos-125-19216-532-135

Kernel Docker Containerd GPU Drivers
COS-6.12.94 v27.5.1 v2.2.7 See List
Change

Updated cos-gpu-installer to v2.7.7.

Fixed

Added support for net-fs/lustre-client-drivers v2.14.0_p259.

Fixed

Upgraded sys-apps/xemu to v0.0.10.

Security

Fixed CVE-2026-68093 in the Linux kernel.

Security

Fixed CVE-2026-68096 in the Linux kernel.

Security

Fixed CVE-2026-68096 in the Linux kernel.

Security

Fixed CVE-2026-68096 in the Linux kernel.

Security

Fixed CVE-2026-68129 in the linux kernel

Security

Fixed CVE-2026-68296 in the Linux kernel.

Security

Fixed CVE-2026-68386 in the Linux kernel.

Security

Fixed KCTF-0650f1c in the Linux Kernel.

Change

Runtime sysctl changes:

  • Changed: net.ipv4.udp_mem: 188034 250715 376068 -> 188034 250714 376068

August 20, 2026

Change

cos-125-19216-532-123

Kernel Docker Containerd GPU Drivers
COS-6.12.94 v27.5.1 v2.2.7 See List
Change

Updated containerd to v2.2.7.

Security

Fixed CVE-2026-68329 in the Linux kernel.

August 19, 2026

Change

cos-125-19216-532-121

Kernel Docker Containerd GPU Drivers
COS-6.12.94 v27.5.1 v2.1.9 See List
Fixed

Updated cos-gpu-installer to v2.7.6.

Security

Fixed CVE-2026-68116 in the Linux kernel.

Security

Fixed CVE-2026-68139 in the Linux kernel.

Security

Fixed CVE-2026-68171 in the Linux kernel.

Security

Fixed CVE-2026-68325 in the Linux kernel.

Security

Fixed CVE-2026-68336 in the Linux kernel.

Security

Fixed CVE-2026-68343 in the Linux kernel.

August 17, 2026

Change

cos-125-19216-532-108

Kernel Docker Containerd GPU Drivers
COS-6.12.94 v27.5.1 v2.1.9 See List
Feature

Enabled CONFIG_UDMABUF on x86_64.

Security

Fixed CVE-2026-64380 in the Linux kernel.

Security

Fixed CVE-2026-64561 in the Linux kernel.

Security

Fixed CVE-2026-64562 in the Linux kernel.

Security

Fixed CVE-2026-64567 in the Linux kernel.

Security

Fixed CVE-2026-64572 in the Linux kernel.

Security

Fixed CVE-2026-64576 in the Linux kernel.

Security

Fixed CVE-2026-64579 in the Linux kernel.

Security

Fixed CVE-2026-64580 in the Linux kernel.

Security

Fixed CVE-2026-64590 in the Linux kernel.

Security

Fixed CVE-2026-64593 in the Linux kernel.

Security

Fixed CVE-2026-64597 in the Linux kernel.

Security

Fixed CVE-2026-64598 in the Linux kernel.

Security

Fixed CVE-2026-64604 in the Linux kernel.

Security

Fixed CVE-2026-68092 in the Linux kernel.

Security

Fixed CVE-2026-68119 in the Linux kernel.

Security

Fixed CVE-2026-68136 in the Linux kernel.

Security

Fixed CVE-2026-68142 in the Linux kernel.

Security

Fixed CVE-2026-68145 in the Linux kernel.

Security

Fixed CVE-2026-68146 in the Linux kernel.

Security

Fixed CVE-2026-68147 in the Linux kernel.

Security

Fixed CVE-2026-68149 in the Linux kernel.

Security

Fixed CVE-2026-68184 in the Linux kernel.

Security

Fixed CVE-2026-68186 in the Linux kernel.

Security

Fixed CVE-2026-68187 in the Linux kernel.

Security

Fixed CVE-2026-68284 in the Linux kernel.

Security

Fixed CVE-2026-68338 in the Linux kernel.

Security

Fixed CVE-2026-68388 in the Linux kernel.

Security

Fixed CVE-2026-68396 in the Linux kernel.

Security

Fixed CVE-2026-68398 in the Linux kernel.

Security

Fixed CVE-2026-68422 in the Linux kernel.

Security

Fixed CVE-2026-68425 in the Linux kernel.

Security

Fixed CVE-2026-68428 in the Linux kernel.

Security

Fixed CVE-2026-68432 in the Linux kernel.

Security

Fixed CVE-2026-68442 in the Linux kernel.

Security

Fixed CVE-2026-68450 in the Linux kernel.

August 04, 2026

Change

cos-125-19216-532-62

Kernel Docker Containerd GPU Drivers
COS-6.12.94 v27.5.1 v2.1.9 See List
Change

cchost: Add bpf-lsm-policy for VM restrictions.

Fixed

Added kernel patch to reduce bcache garbage collection sleep interval to prevent I/O stalls.

Security

Fixed CVE-2026-35177 in app-editors/vim and app-editors/vim-core.

Security

Fixed CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, and CVE-2026-46598 in dev-go/crypto.

Security

Fixed CVE-2026-58470 in net-misc/wget.

Security

Fixed CVE-2026-59890 in dev-python/setuptools.

Security

Fixed CVE-2026-64227 in the Linux kernel.

Security

Fixed CVE-2026-64244 in the Linux kernel.

Security

Fixed CVE-2026-64247 in the Linux kernel.

Security

Fixed CVE-2026-64265 in the Linux kernel.

Security

Fixed CVE-2026-64266 in the Linux kernel.

Security

Fixed CVE-2026-64284 in the Linux kernel.

Security

Fixed CVE-2026-64289 in the Linux kernel.

Security

Fixed CVE-2026-64294 in the Linux kernel.

Security

Fixed CVE-2026-64298 in the Linux kernel.

Security

Fixed CVE-2026-64299 in the Linux kernel.

Security

Fixed CVE-2026-64306 in the Linux kernel.

Security

Fixed CVE-2026-64313 in the Linux kernel.

Security

Fixed CVE-2026-64317 in the Linux kernel.

Security

Fixed CVE-2026-64319 in the Linux kernel.

Security

Fixed CVE-2026-64322 in the Linux kernel.

Security

Fixed CVE-2026-64323 in the Linux kernel.

Security

Fixed CVE-2026-64324 in the Linux kernel.

Security

Fixed CVE-2026-64326 in the Linux kernel.

Security

Fixed CVE-2026-64354 in the Linux kernel.

Security

Fixed CVE-2026-64357 in the Linux kernel.

Security

Fixed CVE-2026-64368 in the Linux kernel.

Security

Fixed CVE-2026-64370 in the Linux kernel.

Security

Fixed CVE-2026-64373 in the Linux kernel.

Security

Fixed CVE-2026-64378 in the Linux kernel.

Security

Fixed CVE-2026-64379 in the Linux kernel.

Security

Fixed CVE-2026-64381 in the Linux kernel.

Security

Fixed CVE-2026-64382 in the Linux kernel.

Security

Fixed CVE-2026-64383 in the Linux kernel.

Security

Fixed CVE-2026-64384 in the Linux kernel.

Security

Fixed CVE-2026-64385 in the Linux kernel.

Security

Fixed CVE-2026-64386 in the Linux kernel.

Security

Fixed CVE-2026-64387 in the Linux kernel.

Security

Fixed CVE-2026-64411 in the Linux kernel.

Security

Fixed CVE-2026-64412 in the Linux kernel.

Security

Fixed CVE-2026-64414 in the Linux kernel.

Security

Fixed CVE-2026-64415 in the Linux kernel.

Security

Fixed CVE-2026-64418 in the Linux kernel.

Security

Fixed CVE-2026-64422 in the Linux kernel.

Security

Fixed CVE-2026-64423 in the Linux kernel.

Security

Fixed CVE-2026-64425 in the Linux kernel.

Security

Fixed CVE-2026-64432 in the Linux kernel.

Security

Fixed CVE-2026-64435 in the Linux kernel.

Security

Fixed CVE-2026-64436 in the Linux kernel.

Security

Fixed CVE-2026-64448 in the Linux kernel.

Security

Fixed CVE-2026-64456 in the Linux kernel.

Security

Fixed CVE-2026-64473 in the Linux kernel.

Security

Fixed CVE-2026-64474 in the Linux kernel.

Security

Fixed CVE-2026-64475 in the Linux kernel.

Security

Fixed CVE-2026-64512 in the Linux kernel.

Security

Fixed CVE-2026-64514 in the Linux kernel.