What is GCP-2026-023?

GCP-2026-023 is a security advisory published by Google Cloud Security Bulletins with High severity. GCP-2026-023 — Published: 2026-04-28Updated: 2026-05-07Description Description Severity Notes 2026-05-07 Update: Added patch versions for Ubuntu node…

Which CVE IDs does GCP-2026-023 cover?

GCP-2026-023 covers the following CVE IDs: CVE-2026-23074. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GCP-2026-023High

GCP-2026-023 — Published: 2026-04-28Updated: 2026-05-07Description Description Severity Notes 2026-05-07 Update: Added patch versions for Ubuntu node…

Vendor

Google Cloud Security Bulletins

Published

May 20, 2026

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2026-23074 →

📋 Description

Published: 2026-04-28Updated: 2026-05-07Description Description Severity Notes 2026-05-07 Update: Added patch versions for Ubuntu node pools on GKE The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS nodes: CVE-2026-23074 For instructions and more details, see the following bulletins: GKE security bulletin GDC software for VMware security bulletin GKE on AWS security bulletin GKE on Azure security bulletin GDC software for bare metal security bulletin High CVE-2026-23074

🔗 References (1)

advisoryhttps://docs.cloud.google.com/support/bulletins/index#gcp-2026-023