What is GCP-2026-016?

GCP-2026-016 is a security advisory published by Google Cloud Security Bulletins with High severity. GCP-2026-016 — Published: 2026-03-27Updated: 2026-03-31Description Description Severity Notes 2026-03-31 Update: Added patch versions for Ubuntu nodes…

Which CVE IDs does GCP-2026-016 cover?

GCP-2026-016 covers the following CVE IDs: CVE-2025-38616. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GCP-2026-016High

GCP-2026-016 — Published: 2026-03-27Updated: 2026-03-31Description Description Severity Notes 2026-03-31 Update: Added patch versions for Ubuntu nodes…

Vendor

Google Cloud Security Bulletins

Published

May 20, 2026

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2025-38616 →

📋 Description

Published: 2026-03-27Updated: 2026-03-31Description Description Severity Notes 2026-03-31 Update: Added patch versions for Ubuntu nodes with GKE. The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS nodes: CVE-2025-38616 For instructions and more details, see the following bulletins: GKE security bulletin GDC software for VMware security bulletin GKE on AWS security bulletin GKE on Azure security bulletin GDC software for bare metal security bulletin High CVE-2025-38616

🔗 References (1)

advisoryhttps://docs.cloud.google.com/support/bulletins/index#gcp-2026-016