StackRadar

CVE-2026-27456

Medium

Advisory

Published 3 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.7
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,200
of 17,805 indexed, latest versions
Container images
2,355
deployed by those charts
Fix available
3 of 3
affected packages

libblkid-devel-2.42-1.1 on GA media

Carried by container images the latest versions of 2,200 of 17,805 indexed charts deploy, on 2,355 images.

Affected packageAffected versionsFixed inImages
util-linuxdeb1:2.27.1-6ubuntu3.3, 1:2.38.1-5+deb12u1, 1:4.16.0-2+really2.41-5, 2.20.1-5.1ubuntu20.2+44 more2.37.2-4ubuntu3.6, 2.39.3-9ubuntu6.6, 2.41.3-3ubuntu2.2, 2.41.5-0+deb13u1+1 more2,240
util-linuxapk2.41-r9, 2.41.2-r02.41.4-r0, 2.41.6-r0105
util-linuxrpm2.33.1-lp151.3.3.2, 2.40.4-150700.2.4, 2.40.4-150700.4.10.1, 2.41.1-160000.2.2+1 more2.40.4-150700.4.13.1, 2.41.1-160000.4.1, 2.42-1.110
OSV records
ALPINE-CVE-2026-27456DEBIAN-CVE-2026-27456UBUNTU-CVE-2026-27456ECHO-a95f-c9f9-a568openSUSE-SU-2026:10736-1SUSE-SU-2026:22332-1SUSE-SU-2026:2485-1
Also known as
USN-8702-1

Charts affected

2,200 by stars
ChartLatestAffected imagesRadar Score
pagesliviu884422-pages1.0.02 of 3See more

pages liviu884422-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
util-linux@2.34-0.1ubuntu9.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
util-linux@2.31.1-0.4ubuntu3.6
no fix listed

Open the chart page →

20,279
llmarinerllmariner1.53.11 of 21See more

llmariner llmariner 1.53.1

1 of the 21 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/model-manager-loader:1.27.026ac7263a823
util-linux@2.41-5
2.41.5-0+deb13u1

Open the chart page →

12,181
jellyfinlmatfyVerified publisher0.1.31 of 1See more

jellyfin lmatfy 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11aefb67e6a7ff
util-linux@2.41-5
2.41.5-0+deb13u1

Open the chart page →

2,661
zigbee2mqttlmatfyVerified publisher0.1.141 of 2See more

zigbee2mqtt lmatfy 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
koenkk/zigbee2mqtt:2.7.260a295b40f4e
util-linux@2.41.2-r0
2.41.4-r0

Open the chart page →

1,394
mt-mcp-grafanaloafoe0.10.01 of 2See more

mt-mcp-grafana loafoe 0.10.0

1 of the 2 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
grafana/mcp-grafana:0.14.042f541f22063
util-linux@2.38.1-5+deb12u3
no fix listed

Open the chart page →

1,984
local-businesslocal-business0.1.01 of 1See more

local-business local-business 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
alakaganaguathoork/local-business:latest7eb27b0f4a5a
util-linux@2.41-r9
2.41.6-r0

Open the chart page →

949
locust-pluginslocust-pluginsVerified publisher0.0.41 of 3See more

locust-plugins locust-plugins 0.0.4

1 of the 3 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
locustio/locust:2.24.151d866285170
util-linux@2.38.1-5+b1
no fix listed

Open the chart page →

7,574
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
util-linux@2.38.1-5+deb12u3
no fix listed

Open the chart page →

33,836
vnode-runtimeloftVerified publisher0.3.31 of 1See more

vnode-runtime loft 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vnode-runtime:0.3.3b065ec5a5239
util-linux@2.37.2-4ubuntu3.5
2.37.2-4ubuntu3.6

Open the chart page →

2,546
nightingalelogic3579Verified publisher0.3.13 of 6See more

nightingale logic3579 0.3.1

3 of the 6 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
flashcatcloud/categraf:latest42e6ab16472e
util-linux@2.39.3-9ubuntu6.5
2.39.3-9ubuntu6.6
flashcatcloud/nightingale:8.5.1421acb36181b
util-linux@2.41-5
2.41.5-0+deb13u1
library/redis:6.2143f7bfc2358
util-linux@2.38.1-5+deb12u3
no fix listed

Open the chart page →

9,164
rocketmq-exporterlogic3579Verified publisher0.0.21 of 1See more

rocketmq-exporter logic3579 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
apache/rocketmq-exporter:0.0.2c8fb51195444
util-linux@2.37.2-4ubuntu3
2.37.2-4ubuntu3.6

Open the chart page →

6,689
login-test-backendlogin-test-backend0.1.01 of 2See more

login-test-backend login-test-backend 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
aboogie/login_test_backend:new9c41a4483ac8
util-linux@2.38.1-5+deb12u1
no fix listed

Open the chart page →

6,597
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
logiqai/flash:v3.10.265b996bc7bdc
util-linux@2.38.1-5+deb12u1
no fix listed

Open the chart page →

23,734
logtidelogtideVerified publisher2.1.141 of 4See more

logtide logtide 2.1.14

1 of the 4 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
timescale/timescaledb:latest-pg156343bdc87ca1
util-linux@2.41-r9
2.41.6-r0

Open the chart page →

2,964
clickhouselohmag0.2.01 of 1See more

clickhouse lohmag 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
yandex/clickhouse-server:19.17ab1738a64b70
util-linux@2.31.1-0.4ubuntu3.6
no fix listed

Open the chart page →

5,932
allure_docker_servicelovemew67Verified publisher0.0.11 of 1See more

allure_docker_service lovemew67 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.27.00815040339a9
util-linux@2.31.1-0.4ubuntu3.7
no fix listed

Open the chart page →

65,373
mongo_guilovemew67Verified publisher0.0.21 of 1See more

mongo_gui lovemew67 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
haohanyang/compass-web:0.1.1e3952b14ae8e
util-linux@2.38.1-5+deb12u2
no fix listed

Open the chart page →

2,012
oncall-hobbylovemew67Verified publisher0.0.51 of 2See more

oncall-hobby lovemew67 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
library/redis:7.0.15352c1fdadc91
util-linux@2.38.1-5+deb12u1
no fix listed

Open the chart page →

5,905
vulnerability-scaninglovemew67Verified publisher0.0.31 of 2See more

vulnerability-scaning lovemew67 0.0.3

1 of the 2 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.35.14154286c0209
util-linux@2.39.3-9ubuntu6.3
2.39.3-9ubuntu6.6

Open the chart page →

5,244
loxilbloxilbVerified publisher0.1.02 of 2See more

loxilb loxilb 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
ghcr.io/loxilb-io/kube-loxilb:latest6f65e53e252d
util-linux@2.37.2-4ubuntu3.5
2.37.2-4ubuntu3.6
ghcr.io/loxilb-io/loxilb:latestc7ede1bab641
util-linux@2.37.2-4ubuntu3.5
2.37.2-4ubuntu3.6

Open the chart page →

4,563
lsdisklsdiskVerified publisher2.0.71 of 4See more

lsdisk lsdisk 2.0.7

1 of the 4 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
danialnabiyan1382/lsdisk:v2.0.8f96a7ebf1f42
util-linux@2.38.1-5+deb12u3
no fix listed

Open the chart page →

5,080
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
util-linux@2.34-0.1ubuntu9.3
no fix listed

Open the chart page →

91,475
squash-apilsst-sqre0.1.61 of 3See more

squash-api lsst-sqre 0.1.6

1 of the 3 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
library/redis:6.2143f7bfc2358
util-linux@2.38.1-5+deb12u3
no fix listed

Open the chart page →

6,670
elastictranscoderluiscajl0.46.04 of 4See more

elastictranscoder luiscajl 0.46.0

4 of the 4 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
elastictranscoder/media:627e21dc963ab3858c6b
util-linux@2.31.1-0.4ubuntu3.7
no fix listed
elastictranscoder/media-storage:f6d861a026208b8c2359
util-linux@2.31.1-0.4ubuntu3.7
no fix listed
elastictranscoder/transcoder:627e21dcb4a0327029e6
util-linux@2.31.1-0.4ubuntu3.6
no fix listed
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
util-linux@2.31.1-0.4ubuntu3.6
no fix listed

Open the chart page →

58,350
flaresolverrluiscajl0.0.31 of 1See more

flaresolverr luiscajl 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:latest139dfee1c6f8
util-linux@2.38.1-5+deb12u3
no fix listed

Open the chart page →

27,857
plex-rclone-wireguardluiscajl1.0.191 of 2See more

plex-rclone-wireguard luiscajl 1.0.19

1 of the 2 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/plex:latest7f9a1d574958
util-linux@2.41.3-3ubuntu2
2.41.3-3ubuntu2.2

Open the chart page →

876
hyperglassm0nsterrr-hyperglassVerified publisher4.2.11 of 2See more

hyperglass m0nsterrr-hyperglass 4.2.1

1 of the 2 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
valkey/valkey:9.0.2930b41430fb7
util-linux@2.41-5
2.41.5-0+deb13u1

Open the chart page →

4,720
jellyfinm0nsterrr-jellyfinVerified publisher2.3.51 of 1See more

jellyfin m0nsterrr-jellyfin 2.3.5

1 of the 1 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
util-linux@2.41-5
2.41.5-0+deb13u1

Open the chart page →

2,661
kea-exporterm0nsterrr-kea-exporterVerified publisher2.2.11 of 1See more

kea-exporter m0nsterrr-kea-exporter 2.2.1

1 of the 1 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
ghcr.io/mweinelt/kea-exporter:v0.7.1d7b77020e924
util-linux@2.41-5
2.41.5-0+deb13u1

Open the chart page →

1,095
m9sweeperm9sweeperVerified publisher1.6.01 of 6See more

m9sweeper m9sweeper 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
util-linux@2.38.1-5+b1
no fix listed

Open the chart page →

9,854
magistralamagistrala-devopsVerified publisher0.16.22 of 42See more

magistrala magistrala-devops 0.16.2

2 of the 42 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.31-latestcaa5b411be16
util-linux@2.37.2-4ubuntu3.4
2.37.2-4ubuntu3.6
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
util-linux@2.37.2-4ubuntu3
2.37.2-4ubuntu3.6

Open the chart page →

24,770
docker-mailservermailserverVerified publisher0.2.651 of 9See more

docker-mailserver mailserver 0.2.65

1 of the 9 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
mvance/unbound:1.22.076906da36d18
util-linux@2.38.1-5+deb12u1
no fix listed

Open the chart page →

11,547
plane-mcp-servermakeplaneVerified publisher1.0.01 of 2See more

plane-mcp-server makeplane 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
makeplane/plane-mcp-server:v0.3.071b7252adef0
util-linux@2.41-5
2.41.5-0+deb13u1

Open the chart page →

2,652
nodecg-chartmarathon-charts0.1.51 of 2See more

nodecg-chart marathon-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
util-linux@2.38.1-5+b1
no fix listed

Open the chart page →

7,388
marge-botmarge-bot-helm1.3.51 of 1See more

marge-bot marge-bot-helm 1.3.5

1 of the 1 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.16.0b59f01bc0418
util-linux@2.41-5
2.41.5-0+deb13u1

Open the chart page →

3,622
circleci-runnermatic-insurance0.1.11 of 1See more

circleci-runner matic-insurance 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
circleci/runner:launch-agent9bdc62f02162
util-linux@2.34-0.1ubuntu9.6
no fix listed

Open the chart page →

4,172
mauticmautic-chartVerified publisher1.0.22 of 3See more

mautic mautic-chart 1.0.2

2 of the 3 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.2.6-debian-12-r0373c3c260571
util-linux@2.38.1-5+deb12u1
no fix listed
mautic/mautic:7-apacheeb8cc73d97e1
util-linux@2.38.1-5+deb12u3
no fix listed

Open the chart page →

8,495
mayastormayastorVerified publisher2.12.12 of 31See more

mayastor mayastor 2.12.1

2 of the 31 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
util-linux@2.39.3-9ubuntu6.2
2.39.3-9ubuntu6.6
openebs/etcd:3.6.4-debian-12-r0c86c06f1ce6a
util-linux@2.38.1-5+deb12u3
no fix listed

Open the chart page →

21,418
eoloplantmca-eoloplaner0.1.03 of 7See more

eoloplant mca-eoloplaner 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
hugohg34/toposervice:0.0.2812a03b3f274
util-linux@2.34-0.1ubuntu9.3
no fix listed
library/mongo:5.0.6-focal8e70544b6c76
util-linux@2.34-0.1ubuntu9.3
no fix listed
library/rabbitmq:3.9-management8a279e9396a8
util-linux@2.37.2-4ubuntu3
2.37.2-4ubuntu3.6

Open the chart page →

29,884
claude-code-apimcp-helmVerified publisher0.1.11 of 1See more

claude-code-api mcp-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
arbuzov/claude-code-api:0.1.02d7dd8070610
util-linux@2.38.1-5+deb12u3
no fix listed

Open the chart page →

4,102
mcp-atlassianmcp-helmVerified publisher0.2.281 of 1See more

mcp-atlassian mcp-helm 0.2.28

1 of the 1 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
ghcr.io/sooperset/mcp-atlassian:0.11.927c8e5b890e1
util-linux@2.41-r9
2.41.6-r0

Open the chart page →

1,739
mcp-homeassistantmcp-helmVerified publisher0.2.41 of 1See more

mcp-homeassistant mcp-helm 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
voska/hass-mcp:latest7142a431e2c5
util-linux@2.38.1-5+deb12u3
no fix listed

Open the chart page →

10,631
mcp-kubernetesmcp-helmVerified publisher0.2.71 of 1See more

mcp-kubernetes mcp-helm 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
mcp/kubernetes:latest5ffbf7f0a8aa
util-linux@2.38.1-5+deb12u3
no fix listed

Open the chart page →

5,700
mcpomcp-helmVerified publisher0.2.81 of 1See more

mcpo mcp-helm 0.2.8

1 of the 1 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
ghcr.io/open-webui/mcpo:git-39b4867f06525afac6b
util-linux@2.38.1-5+deb12u3
no fix listed

Open the chart page →

4,597
mcp-playwrightmcp-helmVerified publisher0.1.11 of 1See more

mcp-playwright mcp-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
mcr.microsoft.com/playwright/mcp:v0.0.43e101b832b34d
util-linux@2.38.1-5+deb12u3
no fix listed

Open the chart page →

4,160
searchmcp-helmVerified publisher0.1.31 of 2See more

search mcp-helm 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:latestc80ae007ce2c
util-linux@2.38.1-5+deb12u3
no fix listed

Open the chart page →

8,326
mcroutermcrouterVerified publisher0.2.02 of 2See more

mcrouter mcrouter 0.2.0

2 of the 2 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
library/memcached:1.6.4226983a43c918
util-linux@2.41-5
2.41.5-0+deb13u1
ghcr.io/dragoangel/mcrouter:v2026.06.29.0042afcffe67d0
util-linux@2.39.3-9ubuntu6.5
2.39.3-9ubuntu6.6

Open the chart page →

2,359
backstagemcwarmanVerified publisher0.10.102 of 2See more

backstage mcwarman 0.10.10

2 of the 2 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
util-linux@2.41-5
2.41.5-0+deb13u1
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
util-linux@2.38.1-5+deb12u3
no fix listed

Open the chart page →

9,831
mdai-hubmdai-hubVerified publisher0.10.11 of 14See more

mdai-hub mdai-hub 0.10.1

1 of the 14 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
public.ecr.aws/decisiveai/valkey:9.0.159c7e728fb3a
util-linux@2.41-5
2.41.5-0+deb13u1

Open the chart page →

4,926
dependency-trackmediamarktsaturn1.9.21 of 2See more

dependency-track mediamarktsaturn 1.9.2

1 of the 2 container images this version deploys carry CVE-2026-27456.

Container imageDigestPackageFixed in
dependencytrack/apiserver:4.14.21ba4f004e1ec
util-linux@2.41-5
2.41.5-0+deb13u1

Open the chart page →

3,860

Container images carrying it

2,355 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
util-linux@2.38.1-5+deb12u3
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
util-linux@2.38.1-5+deb12u3
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
util-linux@2.38.1-5+deb12u3
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
util-linux@2.38.1-5+deb12u3
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
util-linux@2.38.1-5+deb12u3
no fix listed
1

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.