Linux: security advisories, deprecations and releases

GKE Private Service Connect API timeouts from three-layer networking bugs

GKE clusters using Private Service Connect in europe-west experienced intermittent API server timeouts caused by packet reordering, Envoy half-close behavior, and a Linux kernel TCP bug in FIN_WAIT_2 state handling.

Linux Kernel Missing Initialization of a Variable Vulnerability

Linux Kernel contains a missing initialization of a variable vulnerability that could allow for unintended modification of page-cache-backed data via failure to preserve the shared-fragment marker during socket buffer coalescing, causing ESP input processing to decrypt shared fragments in place. This vulnerability can be chained with CVE-2026-109618 and CVE-2026-109619 to implant PHP webshells and run commands as root.

CVE-2026-46300

Detecting and mitigating ZDI-CAN-33367 and five other Linux flaws

Sysdig blog post explains how to detect and mitigate six Linux kernel vulnerabilities including ZDI-CAN-33367 using Falco and other open-source tools.

GCP-2026-071: emSign CA compromise in GKE

Multiple emSign subordinate CA keys were stolen, exposing external TLS connections from GKE nodes and control plane to MitM. Internal cluster mTLS is safe. Patched GKE versions now distrust the bad CAs.

CVE-2026-111943

PwnEscape

A critical vulnerability nicknamed PwnEscape (CVE-2026-99999) has been discovered in the Linux kernel's networking code. This flaw allows for a virtual machine escape, enabling code running within a VM to read memory from the underlying host machine. A researcher successfully demonstrated this vulnerability against Vercel's live cloud sandboxes, confirming its exploitability in a real-world shared infrastructure environment. The vulnerability's location…

CVE-2026-99999

Vghost

A flaw named Vghost, tracked as CVE-2026-74580, in the Linux vhost subsystem allows a local user to read and write kernel memory, leading to root privilege escalation. In a virtualization context, it permits an untrusted virtual machine to write to the host's memory and hijack the controlling program. The vulnerability was discovered by Tencent Zhuque Lab and affects nearly a…

CVE-2026-74580

GKE 1.36.3+ FUSE CSI DaemonSet crash on older kernels

Control planes 1.36.3-gke.1244000 and later break the gcsfusecsi-node DaemonSet on Ubuntu and older COS node pools because /proc/sys/fs/fuse is absent.

Container Optimized OS multiple CVEs fixed

Fixed CVE-2026-0864, CVE-2026-56391, CVE-2026-90054 and 18 rsync CVEs across COS images.

CVE-2026-0864 CVE-2026-53784 CVE-2026-53786 CVE-2026-53789 CVE-2026-53791 CVE-2026-53795 CVE-2026-53797 CVE-2026-53798 CVE-2026-53799 CVE-2026-53800 CVE-2026-53801 CVE-2026-53802 CVE-2026-53803 CVE-2026-56391 CVE-2026-70455 CVE-2026-70457 CVE-2026-70459 CVE-2026-70461 CVE-2026-70463 CVE-2026-90054

Copy Fail

A vulnerability named 'Copy Fail' (CVE-2026-31431) has been identified in the Linux kernel's crypto component (algif_aead). This vulnerability, classified as 'Incorrect Resource Transfer Between Spheres', affects a large number of Siemens SIPLUS and SIMATIC products, including those running on Debian Linux and in containerized environments. The vulnerability has a CVSS 3.1 score of 7.8 (High). Siemens has released updates for…

CVE-2026-31431

Linux kernel 7.2 has reached end of life

Linux kernel 7.2 reached end of life on 2026-11-01, as listed by endoflife.date.

Alpine Linux 3.22 reaches end of life on 2027-05-01

Alpine Linux 3.22 reaches end of life on 2027-05-01, as listed by endoflife.date.

Alpine Linux 3.21 has reached end of life

Alpine Linux 3.21 reached end of life on 2026-11-01, as listed by endoflife.date.

SLES 15.6 repositories are being retired

PostgreSQL RPM repos for SLES 15.6 are moved to the ZYPP archive. No further updates will be provided after support ended 31 Dec 2025.

RHEL 10.0 and 9.6 repositories retired

PostgreSQL RPM repos for RHEL 10.0 and 9.6 are moved to the YUM archive. No further updates will be provided for these minor releases.

Linux kernel 5.15 reaches end of life on 2026-12-31

Linux kernel 5.15 reaches end of life on 2026-12-31, as listed by endoflife.date.

Linux kernel 5.10 reaches end of life on 2026-12-31

Linux kernel 5.10 reaches end of life on 2026-12-31, as listed by endoflife.date.

Fedora Linux 43 reaches end of life on 2026-12-09

Fedora Linux 43 reaches end of life on 2026-12-09, as listed by endoflife.date.

Container-Optimized OS cos-121 reaches end of life on 2027-03-01

Container-Optimized OS cos-121 reaches end of life on 2027-03-01, as listed by endoflife.date.

Alpine Linux 3.21 reaches end of life on 2026-11-01

Alpine Linux 3.21 reaches end of life on 2026-11-01, as listed by endoflife.date.

AWS for Fluent Bit 3.0.0 based on Fluent Bit 4.1.1 released

New release upgrades to Fluent Bit 4.1.1 and Amazon Linux 2023, adds native OpenTelemetry support, faster JSON parsing, TLS controls, and better performance for ECS and EKS log routing.

Alpine 3.21.9, 3.22.7, 3.23.7 and 3.24.3 released

Maintenance releases for four Alpine Linux branches include updated packages and security fixes.

Linux kernel 7.3 released

Linux kernel 7.3 was released on 2026-10-18.

Ubuntu 26.10 released

Ubuntu 26.10 was released on 2026-10-15.

Amazon DCV 2026.0 adds RHEL 10 support and new clients

Amazon DCV 2026.0 now supports RHEL 10, Rocky Linux 10, CentOS 10, Ubuntu 26.04 on Wayland and ships updated Windows, Linux, and macOS clients.

Public Preview: AKS on bare metal now on Ubuntu

Azure Kubernetes Service on bare metal is now in public preview, running directly on Ubuntu without virtualization layers.

Container-Optimized OS cos-133 released

Container-Optimized OS cos-133 was released on 2026-09-28.

Public Preview: Ubuntu 26.04 support in AKS

Azure Kubernetes Service now offers Ubuntu 26.04 as an OS SKU for node pools, replacing older LTS releases.