Releases

Flatcar stable-4593.2.4 is a security-only release: the Linux kernel moves to 6.12.95, closing a large batch of CVEs (critical severity), alongside a routine ca-certificates bump to 3.125. There are no other bug fixes or behavioral changes in this build.

• securityUpdate to kernel 6.12.95 to close a large batch of CVEs

  Flatcar stable-4593.2.4 bundles fixes for well over 130 Linux kernel CVEs (including CVE-2026-46242, CVE-2026-53332, CVE-2026-53331, CVE-2026-53356, CVE-2026-53329 among many others) by updating the kernel to 6.12.95. Rated critical; upgrade promptly across fleets since it touches the base OS kernel on every node.

Flatcar Container Linux lts-4081.3.9 is a security-focused patch delivering a large kernel CVE fix set via Linux 6.6.144, alongside a ca-certificates update. No breaking changes or removals.

• securityPatch 144 kernel CVEs via Linux 6.6.144

  Flatcar Container Linux lts-4081.3.9 bundles 144 Linux kernel CVEs fixed via upgrade to kernel 6.6.144 (which also incorporates 6.6.143 and 6.6.142). The highest-severity issues in this set include multiple vulnerabilities affecting core kernel subsystems; a sample of notable CVEs: CVE-2026-46242, CVE-2026-53357, CVE-2026-52941. Upgrade to patch your running systems.