GCP-2026-023

<p><strong>Published: </strong>2026-04-28</p><p><strong>Updated:</strong> 2026-05-07</p><h3 class="hide-from-toc" data-text="Description" id="description_29" tabindex="-1">Description</h3><table> <thead> <tr> <th width="70%">Description</th> <th>Severity</th> <th>Notes</th> </tr> </thead> <tbody> <tr> <td> <p><strong>2026-05-07 Update:</strong> Added patch versions for Ubuntu node pools on GKE</p><hr/> <p>The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS nodes: </p><ul> <li>CVE-2026-23074</li> </ul> <p>For instructions and more details, see the following bulletins:</p> <ul> <li><a href="https://docs.cloud.google.com/kubernetes-engine/security-bulletins#gcp-2026-023-gke">GKE security bulletin</a></li> <li><a href="https://docs.cloud.google.com/kubernetes-engine/security-bulletins#gcp-2026-023-gdcvmware">GDC software for VMware security bulletin</a></li> <li><a href="https://docs.cloud.google.com/kubernetes-engine/security-bulletins#gcp-2026-023-gkeaws">GKE on AWS security bulletin</a></li> <li><a href="https://docs.cloud.google.com/kubernetes-engine/security-bulletins#gcp-2026-023-gkeazure">GKE on Azure security bulletin</a></li> <li><a href="https://docs.cloud.google.com/kubernetes-engine/security-bulletins#gcp-2026-023-gdcbm">GDC software for bare metal security bulletin</a></li> </ul> </td> <td>High</td> <td> <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23074">CVE-2026-23074</a> </td> </tr> </tbody> </table>