What is GCP-2026-007?

GCP-2026-007 is a security advisory published by Google Cloud Security Bulletins with High severity. GCP-2026-007 — Published: 2026-02-09Updated: 2026-03-25Description Description Severity Notes 2026-03-25 Update: Added patch versions for Ubuntu nodes…

Which CVE IDs does GCP-2026-007 cover?

GCP-2026-007 covers the following CVE IDs: CVE-2025-40297. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GCP-2026-007High

GCP-2026-007 — Published: 2026-02-09Updated: 2026-03-25Description Description Severity Notes 2026-03-25 Update: Added patch versions for Ubuntu nodes…

Vendor

Google Cloud Security Bulletins

Published

May 20, 2026

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2025-40297 →

📋 Description

Published: 2026-02-09Updated: 2026-03-25Description Description Severity Notes 2026-03-25 Update: Added patch versions for Ubuntu nodes with GKE. The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS nodes: CVE-2025-40297 For instructions and more details, see the following bulletins: GKE security bulletin GDC software for VMware security bulletin GKE on AWS security bulletin GKE on Azure security bulletin GDC software for bare metal security bulletin High CVE-2025-40297

🔗 References (1)

advisoryhttps://docs.cloud.google.com/support/bulletins/index#gcp-2026-007