Vulnerability fixes

Upgrading a cluster to the latest Google Distributed Cloud version brings added features and fixes to your cluster. With each patch release, we fix numerous security vulnerabilities which makes upgrading to the latest recommended patch version all the more important. Upgrading is a shared responsibility between Google and the customer. For more information about shared responsibilities, see Shared Responsibility Model

This page is for Security specialists who support the resolution of security issues or vulnerabilities which need strategic assistance, such as incidents and issues escalated from support. To learn more about common roles and example tasks that we reference in Google Cloud content, see Common GKE Enterprise user roles and tasks.

How vulnerabilities are classified

Security vulnerabilities are usually identified through the Common Vulnerabilities and Exposures (CVE) system. The GKE Enterprise security team classifies vulnerabilities according to the Kubernetes vulnerability scoring system. Classifications consider many factors including GKE, GKE Enterprise, and Google Distributed Cloud configuration and security hardening. Because of these factors and the investments Google Cloud makes in security, these vulnerability classifications might differ from other classification sources.

The following table describes vulnerability severity categories:

Note: Google Distributed Cloud (software only) on VMware includes the operating system, Container-Optimized OS or Ubuntu, that runs on your nodes. Operating system vulnerabilities that have been fixed are listed on this page, but they aren't further classified by severity.

Severity	Description
Critical	A vulnerability easily exploitable in all clusters by an unauthenticated remote attacker that leads to full system compromise.
High	A vulnerability easily exploitable for many clusters that leads to loss of confidentiality, integrity, or availability.
Medium	A vulnerability exploitable for some clusters where loss of confidentiality, integrity, or availability is limited by common configurations, difficulty of the exploit itself, required access, or user interaction.
Low	All other container vulnerabilities. Exploitation is unlikely or consequences of exploitation are limited.

Security bulletins

Most vulnerabilities are fixed in supported versions of Google Distributed Cloud before they can be exploited. When there are reported incidents that have the potential to compromise the security of your clusters and data, we publish security bulletins. A security bulletin describes the security issue and its impact and provides a mitigation. For more information and a list of published bulletins, see the Security bulletins page.

When a security bulletin is published for a vulnerability that affects Google Distributed Cloud (software only) on VMware, we publish a corresponding release note with a link to the bulletin.

Fixed vulnerabilities by Google Distributed Cloud patch version

The following table lists all vulnerabilities that have been fixed, starting in January 2025. For older fixes, see the release notes. The fixes in the following table are listed by Google Distributed Cloud release version and severity:

Minor	Patch and severity	Vulnerabilities fixed
1.31	1.31.200-gke.58: Critical Severity	N/A
	PATCH_VERSION: High Severity	CVE-2023-39323
	1.31.200-gke.58: Medium Severity	N/A
	1.31.200-gke.58: Low Severity	N/A
	1.31.200-gke.58: Container-Optimized OS	CVE-2024-0135, CVE-2024-0136, CVE-2024-47745, CVE-2024-49861, CVE-2024-49996, CVE-2024-50036, CVE-2024-50055, CVE-2024-50067, CVE-2024-50115, CVE-2024-50121, CVE-2024-50131, CVE-2024-50143, CVE-2024-50151, CVE-2024-50154, CVE-2024-50186, CVE-2024-50215, CVE-2024-50228, CVE-2024-50257, CVE-2024-50262, CVE-2024-50264, CVE-2024-50275, CVE-2024-50278, CVE-2024-50279, CVE-2024-53082, CVE-2024-53099, CVE-2024-53141, CVE-2024-53142, CVE-2024-53173, CVE-2024-56600, CVE-2024-56601, CVE-2024-56606, CVE-2024-56614, CVE-2024-56615, CVE-2024-56658, CVE-2024-56672, CVE-2024-56675
	1.31.200-gke.58: Ubuntu	N/A
	1.31.100-gke.136: Critical Severity	CVE-2023-24538, CVE-2023-24540, CVE-2023-29402, CVE-2023-29404, CVE-2023-29405
	1.31.100-gke.136: High Severity	CVE-2022-41724, CVE-2022-41725, CVE-2023-24534, CVE-2023-24536, CVE-2023-24537, CVE-2023-24539, CVE-2023-29400, CVE-2023-29403, CVE-2023-45287
	1.31.100-gke.136: Medium Severity	N/A
	1.31.100-gke.136: Low Severity	N/A
	1.31.100-gke.136: Container-Optimized OS	N/A
	1.31.100-gke.136: Ubuntu	N/A
1.30	1.30.600-gke.68: Critical Severity	N/A
	1.30.600-gke.68: High Severity	CVE-2023-39323
	1.30.600-gke.68: Medium Severity	N/A
	1.30.600-gke.68: Low Severity	N/A
	1.30.600-gke.68: Container-Optimized OS	CVE-2024-0135, CVE-2024-0136, CVE-2024-40896, CVE-2024-50067, CVE-2024-50121, CVE-2024-50164, CVE-2024-50275, CVE-2024-53141, CVE-2024-53142, CVE-2024-53170, CVE-2024-53173, CVE-2024-53206, CVE-2024-56600, CVE-2024-56601, CVE-2024-56606, CVE-2024-56614, CVE-2024-56615, CVE-2024-56658, CVE-2024-56672, CVE-2024-56675
	1.30.600-gke.68: Ubuntu	N/A
	1.30.500-gke.126: Critical Severity	CVE-2023-24538, CVE-2023-24540, CVE-2023-29402, CVE-2023-29404, CVE-2023-29405
	1.30.500-gke.126: High Severity	CVE-2022-41724, CVE-2022-41725, CVE-2023-24534, CVE-2023-24536, CVE-2023-24537, CVE-2023-24539, CVE-2023-29400, CVE-2023-29403, CVE-2023-45287
	1.30.500-gke.126: Medium Severity	N/A
	1.30.500-gke.126: Low Severity	N/A
	1.30.500-gke.126: Container-Optimized OS	CVE-2024-47745, CVE-2024-49861, CVE-2024-49996, CVE-2024-50036, CVE-2024-50055, CVE-2024-50143, CVE-2024-50151, CVE-2024-50154, CVE-2024-50186, CVE-2024-50228, CVE-2024-50257, CVE-2024-50262, CVE-2024-50264, CVE-2024-50278, CVE-2024-50279, CVE-2024-53082, CVE-2024-53099
	1.30.500-gke.126: Ubuntu	N/A
1.29	1.29.1000-gke.94: Critical Severity	CVE-2023-24538, CVE-2023-24540, CVE-2023-29402, CVE-2023-29404, CVE-2023-29405
	1.29.1000-gke.94: High Severity	CVE-2022-41724, CVE-2022-41725, CVE-2023-24534, CVE-2023-24536, CVE-2023-24537, CVE-2023-24539, CVE-2023-29400, CVE-2023-29403, CVE-2023-45287
	1.29.1000-gke.94: Medium Severity	N/A
	1.29.1000-gke.94: Low Severity	N/A
	1.29.1000-gke.94: Container-Optimized OS	CVE-2024-53099
	1.29.1000-gke.94: Ubuntu	N/A
	1.29.900-gke.181: Critical Severity	N/A
	1.29.900-gke.181: High Severity	CVE-2023-3676, CVE-2023-3955, CVE-2023-5528, CVE-2024-6232
	1.29.900-gke.181: Medium Severity	N/A
	1.29.900-gke.181: Low Severity	N/A
	1.29.900-gke.181: Container-Optimized OS	CVE-2024-38538, CVE-2024-47696, CVE-2024-47701, CVE-2024-47742, CVE-2024-49860, CVE-2024-49882, CVE-2024-49883, CVE-2024-49884, CVE-2024-49889, CVE-2024-49936, CVE-2024-49967, CVE-2024-49983, CVE-2024-50033, CVE-2024-50035, CVE-2024-50036, CVE-2024-50083, CVE-2024-50131, CVE-2024-50143, CVE-2024-50151, CVE-2024-50154, CVE-2024-50186, CVE-2024-50228, CVE-2024-50257, CVE-2024-50262, CVE-2024-50264, CVE-2024-50278, CVE-2024-50279, CVE-2024-53057
	1.29.900-gke.181: Ubuntu	CVE-2022-48666, CVE-2023-52889, CVE-2023-52918, CVE-2024-25744, CVE-2024-26607, CVE-2024-26661, CVE-2024-26669, CVE-2024-26800, CVE-2024-26893, CVE-2024-36484, CVE-2024-38577, CVE-2024-38602, CVE-2024-38611, CVE-2024-39472, CVE-2024-40915, CVE-2024-41011, CVE-2024-41012, CVE-2024-41015, CVE-2024-41017, CVE-2024-41019, CVE-2024-41020, CVE-2024-41022, CVE-2024-41042, CVE-2024-41059, CVE-2024-41060, CVE-2024-41063, CVE-2024-41064, CVE-2024-41065, CVE-2024-41068, CVE-2024-41070, CVE-2024-41071, CVE-2024-41072, CVE-2024-41073, CVE-2024-41077, CVE-2024-41078, CVE-2024-41081, CVE-2024-41090, CVE-2024-41091, CVE-2024-41098, CVE-2024-42114, CVE-2024-42126, CVE-2024-42246, CVE-2024-42259, CVE-2024-42265, CVE-2024-42267, CVE-2024-42269, CVE-2024-42270, CVE-2024-42271, CVE-2024-42272, CVE-2024-42274, CVE-2024-42276, CVE-2024-42277, CVE-2024-42280, CVE-2024-42281, CVE-2024-42283, CVE-2024-42284, CVE-2024-42285, CVE-2024-42286, CVE-2024-42287, CVE-2024-42288, CVE-2024-42289, CVE-2024-42290, CVE-2024-42292, CVE-2024-42295, CVE-2024-42296, CVE-2024-42297, CVE-2024-42299, CVE-2024-42301, CVE-2024-42302, CVE-2024-42304, CVE-2024-42305, CVE-2024-42306, CVE-2024-42309, CVE-2024-42310, CVE-2024-42311, CVE-2024-42312, CVE-2024-42313, CVE-2024-42318, CVE-2024-43817, CVE-2024-43828, CVE-2024-43829, CVE-2024-43830, CVE-2024-43834, CVE-2024-43835, CVE-2024-43839, CVE-2024-43841, CVE-2024-43846, CVE-2024-43849, CVE-2024-43853, CVE-2024-43854, CVE-2024-43856, CVE-2024-43858, CVE-2024-43860, CVE-2024-43861, CVE-2024-43863, CVE-2024-43867, CVE-2024-43869, CVE-2024-43870, CVE-2024-43871, CVE-2024-43873, CVE-2024-43875, CVE-2024-43879, CVE-2024-43880, CVE-2024-43882, CVE-2024-43883, CVE-2024-43884, CVE-2024-43889, CVE-2024-43890, CVE-2024-43892, CVE-2024-43893, CVE-2024-43894, CVE-2024-43902, CVE-2024-43905, CVE-2024-43907, CVE-2024-43908, CVE-2024-43909, CVE-2024-43914, CVE-2024-44934, CVE-2024-44935, CVE-2024-44944, CVE-2024-44946, CVE-2024-44947, CVE-2024-44948, CVE-2024-44954, CVE-2024-44958, CVE-2024-44960, CVE-2024-44965, CVE-2024-44966, CVE-2024-44969, CVE-2024-44971, CVE-2024-44974, CVE-2024-44982, CVE-2024-44983, CVE-2024-44985, CVE-2024-44986, CVE-2024-44987, CVE-2024-44988, CVE-2024-44989, CVE-2024-44990, CVE-2024-44995, CVE-2024-44998, CVE-2024-44999, CVE-2024-45003, CVE-2024-45006, CVE-2024-45007, CVE-2024-45008, CVE-2024-45009, CVE-2024-45011, CVE-2024-45018, CVE-2024-45021, CVE-2024-45025, CVE-2024-45026, CVE-2024-45028, CVE-2024-46673, CVE-2024-46675, CVE-2024-46676, CVE-2024-46677, CVE-2024-46679, CVE-2024-46685, CVE-2024-46689, CVE-2024-46702, CVE-2024-46707, CVE-2024-46713, CVE-2024-46714, CVE-2024-46719, CVE-2024-46721, CVE-2024-46722, CVE-2024-46723, CVE-2024-46724, CVE-2024-46725, CVE-2024-46731, CVE-2024-46732, CVE-2024-46737, CVE-2024-46738, CVE-2024-46739, CVE-2024-46740, CVE-2024-46743, CVE-2024-46744, CVE-2024-46745, CVE-2024-46746, CVE-2024-46747, CVE-2024-46750, CVE-2024-46752, CVE-2024-46755, CVE-2024-46756, CVE-2024-46757, CVE-2024-46758, CVE-2024-46759, CVE-2024-46761, CVE-2024-46763, CVE-2024-46771, CVE-2024-46777, CVE-2024-46780, CVE-2024-46781, CVE-2024-46782, CVE-2024-46783, CVE-2024-46791, CVE-2024-46795, CVE-2024-46798, CVE-2024-46800, CVE-2024-46804, CVE-2024-46805, CVE-2024-46807, CVE-2024-46810, CVE-2024-46814, CVE-2024-46815, CVE-2024-46817, CVE-2024-46818, CVE-2024-46819, CVE-2024-46822, CVE-2024-46828, CVE-2024-46829, CVE-2024-46832, CVE-2024-46840, CVE-2024-46844, CVE-2024-47659, CVE-2024-47660, CVE-2024-47663, CVE-2024-47665, CVE-2024-47667, CVE-2024-47668, CVE-2024-47669

For more information about fixes and changes for a given release, see the release notes.