66 updates from Google Cloud.
Generally available: The network- and memory-optimized <a href="https://docs.cloud.google.com/compute/docs/network-optimized-machines#m4n_series">M4N machine series</a> is generally available.…
Preview: Image Builder is available in allowlist-only Preview. Image Builder is a declarative operating system (OS) image customization tool that automates the process of building, customizing, and…
A vulnerability (CVE-2026-6726) in the Trusted Computing Group's TPM 2.0 reference implementation code was discovered and is being addressed. For more information, see the <a…
Changed: The minimum provisioned throughput for a Hyperdisk ML volume attached to more than 20 instances is 20 MiB/s per instance, reduced from 100 MiB/s. For more information, see <a…
Changed: The following operations on the boot disk of a Compute Engine instance that has a service account attached no longer require the iam.serviceAccounts.actAs permission. In the following list,…
A vulnerability (CVE-2025-10263) about bypass of translation stages or GPT protections in some Arm core families was discovered and has been addressed. For more information, see the <a…
Generally available: The <a href="https://docs.cloud.google.com/compute/docs/general-purpose-machines#supported_disk_types_for_c4d">C4D</a> machine series supports Hyperdisk Balanced High…
Generally available: Two C4A bare metal machine types are generally available: • c4a-standard-96-metal with 96 vCPUs and 384 GB of DDR5 memory • c4a-highmem-96-metal with 96 vCPUs and 768 GB…
A vulnerability in AMD firmware (CVE-2025-61971, CVE-2025-61972, CVE-2024-36315) that could compromise SEV-SNP guests has been addressed. For more information, see the <a…
A vulnerability (CVE-2025-54518) about potential corruption within the micro-operation (OP) cache in Zen 2 microarchitecture processors was discovered and has been addressed. For more information,…
Generally available: Compute Engine now offers support for AI zones. To learn more, see <a href="https://docs.cloud.google.com/compute/docs/regions-zones/ai-zones">AI zones</a>.
A vulnerability affecting AMD SEV-SNP Confidential VM instances was discovered and has been addressed. For more information, see the <a…
A vulnerability (CVE-2025-54510) about AMD SEV-SNP guest memory integrity has been addressed. For more information, see the <a…
A vulnerability (CVE-2026-23268) about CrackArmor was discovered and has been addressed. For more information, see the <a…
Changed: The following operations on the boot disk of a Compute Engine instance that has a service account attached require the iam.serviceAccounts.actAs permission on the service account. In the…
To address high-severity kernel vulnerabilities (including <a href="https://nvd.nist.gov/vuln/detail/CVE-2025-21756">CVE-2025-21756</a> and <a…
For Red Hat Enterprise Linux (RHEL) operating system, VM Manager provides vulnerability scanning results based on the latest minor version for each major version released. If your VM runs an earlier…
Control of MCP use with organization policies is deprecated. After March 17, 2026, organization policies that use the gcp.managed.allowedMCPServices constraint won't work, and you can control MCP use…