Flatcar Container Linux

stable-4757.2.2Provisioning & Runtime

Oct 23, 2026

A security-focused maintenance release with extensive Linux, Go, and certificate fixes, plus routine component updates. It also includes platform-specific boot and time-synchronization corrections.

Action needed (2)

securitycriticalGo security fixes, including CVE-2026-111943
Go security fixes ship in this release, including CVE-2026-111943. The update also addresses the other listed Go advisories.
CVE-2026-111943
securityhighLinux security fixes, including CVE-2026-98618
Linux security fixes ship in this release, including CVE-2026-98618. The recorded Linux update also addresses the other listed Linux advisories.
CVE-2026-98618

All 5 other recorded changesvalue changes 3 · fixes 2

value changes (3)

- Go ([1.26.10](https://go.dev/doc/devel/release#go1.26.10)
- Linux ([6.12.113](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.113)
- ca-certificates ([3.131](https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_131.html)

fixes (2)

Removed bare earlycon from the kernel command line.
Masked systemd-timesyncd.service in the OEM sysext.

Add Flatcar Container Linux to your stack

A weekly email arrives when a release needs action. Like the security patches in this release.

Add to stack →

Official release note ↗All Flatcar Container Linux releases →