Flatcar Container Linux
stable-4593.2.1Provisioning & RuntimeFlatcar stable-4593.2.1 is a security-only update: 130+ Linux kernel CVEs patched and the kernel bumped to 6.12.87. Reboot nodes to apply.
security130+ Linux kernel CVEs patched — reboot nodes promptly
This release patches 130+ Linux kernel CVEs (CVE-2026-31xxx and CVE-2026-43xxx series), rolling up kernel versions 6.12.82 through 6.12.87. The sheer volume suggests a large stable-kernel backport batch. Treat this as a high-priority update — schedule a node rolling restart via your update operator or manually drain and reboot nodes running stable-4593.2.0 as soon as your change window allows.
enhancementCA certificates updated to NSS 3.123.1 — check custom CA chains
ca-certificates updated to NSS 3.123.1. If you have services doing TLS certificate validation at the OS level (not inside containers), verify that trust store changes don't affect any pinned or custom CA chains after the node reboots.
Key changes (4)
- Linux kernel updated from the 4593.2.0 baseline to 6.12.87, incorporating five point releases (6.12.82–6.12.87)
- 130+ Linux kernel CVEs patched across the CVE-2026-31xxx and CVE-2026-43xxx series
- ca-certificates updated to NSS 3.123.1
- No user-space component changes or breaking changes in this release — purely a security/kernel update