Google blog.google

GCP-2026-033

Imported from official source

September 11, 2026 14:57 Security notice

Cybersecurity Classified by Officially

Published: 2026-05-14

Updated: 2026-07-16

Description

Description Severity Notes

2026-07-16 Update: The following versions of GKE are updated with code to fix this vulnerability on Ubuntu. Upgrade your Ubuntu node pools to the following versions or later:

1.30.14-gke.2710000
1.31.14-gke.2116000
1.32.13-gke.1829000
1.33.13-gke.1011000
1.34.9-gke.1131000
1.35.6-gke.1127000
1.36.2-gke.1346000

A container breakout vulnerability CVE-2026-46300 has been found in the Linux kernel, known as Fragnesia. It allows an unprivileged local attacker to escalate to root on the host.

For instructions and more details, see the following bulletins:

Medium

This is an extract. The publication continues at the source.

Read the original at the source: https://docs.cloud.google.com/support/bulletins/index#gcp-2026-033

Officially imported this from Google’s own source and shows an extract. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.

Provenance

Organization: Google — imported from official source
Official source: https://cloud.google.com/feeds/google-cloud-security-bulletins.xml RSS
Imported: September 18, 2026 09:42
Versions: 1 recorded
Identity: tag:google.com,2016:google-cloud-security-bulletins#gcp-2026-033