Several security vulnerabilities were discovered in the Linux kernel used in Google Cloud Platform (GCP) and Google Kubernetes Engine (GKE) systems, including a flaw known as VMSCAPE that allows insufficient branch predictor isolation between a guest VM and a userspace hypervisor. This could enable an attacker in a guest VM to potentially expose sensitive information from the host OS. Additional flaws affect the HSI, I2C, Bluetooth, and Timer subsystems. These issues could allow an attacker to compromise the system. Fixes have been released and require a system update and reboot.