Google Cloud warns of Linux kernel TCP use-after-free flaw in GKE
What happened.Google Cloud published security bulletin GCP-2026-077 detailing a Linux kernel networking use-after-free vulnerability affecting Google Kubernetes Engine clusters.
Why it matters.Kubernetes worker nodes run shared container workloads across cloud environments. When external TCP handshakes corrupt kernel socket structures, attackers crash worker nodes or escape container boundaries to gain host root privileges. Cloud platform teams must upgrade GKE node images immediately. Infrastructure operators should audit VPC firewalls to block public ingress to node IP ranges.