CVE-2026-6238

Medium

Advisory

Published 28 Apr 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.004; 30th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,464; of 17,828 indexed, latest versions
Container images: 2,496; deployed by those charts
Fix available: 1 of 3; affected packages

CVE-2026-6238 affecting package glibc 2.38-21

Carried by container images the latest versions of 2,464 of 17,828 indexed charts deploy, on 2,496 images.

Affected package	Affected versions	Fixed in	Images
glibcdeb	2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+60 more	2.35-0ubuntu3.14, 2.39-0ubuntu8.8, 2.41-12+deb13u2+e5, 2.43-2ubuntu2.3	2,476
eglibcdeb	2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 more	no fix listed	7
glibcrpm	2.38-16.azl3, 2.38-18.azl3, 2.38-20.azl3	no fix listed	13

OSV records: DEBIAN-CVE-2026-6238 UBUNTU-CVE-2026-6238 AZL-85004 ECHO-916f-8705-1b52
Also known as: USN-8611-1

Charts affected

2,464 by stars

Chart	Latest	Affected images	Radar Score

Container images carrying it

2,496 by charts deploying them

A fixed version is listed for 1 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/nginx :latest	cfb8a89ac237	glibc@2.41-12+deb13u4	no fix listed	1
library/nginx :1.27.3	fb197595ebe7	glibc@2.36-9+deb12u9	no fix listed	1
library/node :22-bookworm-slim	48e4b67d85f8	glibc@2.36-9+deb12u14	no fix listed	1
library/node :20	8f693eaa7e0a	glibc@2.36-9+deb12u13	no fix listed	1
library/php :8.4-fpm	59fa733c9af6	glibc@2.41-12+deb13u3	no fix listed	1
library/phpmyadmin :5.2.3-apache	adc486045303	glibc@2.41-12+deb13u4	no fix listed	1
library/postgres :18.0	073e7c8b84e2	glibc@2.41-12	no fix listed	1
library/postgres :18 :18.6-trixie	10037cee1d5e	glibc@2.41-12+deb13u4	no fix listed	1
library/postgres :17.4	304ab8135187	glibc@2.36-9+deb12u10	no fix listed	1
library/postgres :18.4	3a82e1f56c8f	glibc@2.41-12+deb13u3	no fix listed	1
library/postgres :16.11	468e1f126ca5	glibc@2.41-12+deb13u1	no fix listed	1
library/postgres :16.6	557fea37a744	glibc@2.36-9+deb12u9	no fix listed	1
library/postgres :18.3	69e8582b781c	glibc@2.41-12+deb13u1	no fix listed	1
library/postgres :15.18	6eb0add3b77c	glibc@2.41-12+deb13u3	no fix listed	1
library/postgres :15.3	8775adb39f0d	glibc@2.36-9+deb12u1	no fix listed	1
library/postgres :18.4	8ff36f3c6637	glibc@2.41-12+deb13u3	no fix listed	1
library/postgres :15	9b1d34adbce1	glibc@2.41-12+deb13u3	no fix listed	1
library/postgres :18.3	a9abf4275f9e	glibc@2.41-12+deb13u2	no fix listed	1
library/postgres :17.5	aadf2c0696f5	glibc@2.41-12	no fix listed	1
library/postgres :13.12	ced3ba927f4c	glibc@2.36-9+deb12u3	no fix listed	1
library/postgres :15.18-bookworm	e8db9bd3e9e1	glibc@2.36-9+deb12u14	no fix listed	1
library/postgres :14.22	eba8ddbdd837	glibc@2.41-12+deb13u2	no fix listed	1
library/postgres :17.10	ebba4f4de37f	glibc@2.41-12+deb13u3	no fix listed	1
library/postgres :17.5-bookworm	fbcea1bd13b6	glibc@2.36-9+deb12u10	no fix listed	1
library/python :3.10	70c9cc675605	glibc@2.41-12+deb13u3	no fix listed	1
library/python :3.12-slim	78387bc3881b	glibc@2.41-12+deb13u3	no fix listed	1
library/python :3.14-slim :3-slim	cad9a2c87176	glibc@2.41-12+deb13u3	no fix listed	1
library/python :3.8	d41127070014	glibc@2.36-9+deb12u8	no fix listed	1
library/python :3.9	da5aee29682d	glibc@2.41-12	no fix listed	1
library/rabbitmq :3.12.10	0742852455ad	glibc@2.35-0ubuntu3.5	2.35-0ubuntu3.14	1
library/rabbitmq :3.11.5-management	1b0f675d2f24	glibc@2.31-0ubuntu9.9	no fix listed	1
library/rabbitmq :4.2.8	7561d672fae4	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.8	1
library/rabbitmq :3.7-management	b6dd45cc35b3	glibc@2.27-3ubuntu1.2	no fix listed	1
library/redis :8.6.2	009cc37796fb	glibc@2.41-12+deb13u2	no fix listed	1
library/redis :6 :6.2	143f7bfc2358	glibc@2.36-9+deb12u14	no fix listed	1
library/redis :8.8.0	234c902a2db4	glibc@2.41-12+deb13u3	no fix listed	1
library/redis :7.0.15	352c1fdadc91	glibc@2.36-9+deb12u8	no fix listed	1
library/redis :8.4.0	3906b477e4b6	glibc@2.36-9+deb12u13	no fix listed	1
library/redis :8.8.1-trixie	3eafabb4c93f	glibc@2.41-12+deb13u3	no fix listed	1
library/redis :8.2.2	4521b581dbdd	glibc@2.36-9+deb12u13	no fix listed	1
library/redis :8.6.3	4d25e2fe601f	glibc@2.41-12+deb13u3	no fix listed	1
library/redis :8.2.1	5fa2edb1e408	glibc@2.36-9+deb12u13	no fix listed	1
library/redis	83edc2b8e9ff	glibc@2.36-9+deb12u13	no fix listed	1
library/redis :8.4	8df317692c59	glibc@2.41-12+deb13u3	no fix listed	1
library/redis :8.0.2	b43d2dcbbdb1	glibc@2.36-9+deb12u10	no fix listed	1
library/redis :7.4.1	bb142a9c18ac	glibc@2.36-9+deb12u9	no fix listed	1
library/redis :8.0.3	be0a135f1955	glibc@2.36-9+deb12u13	no fix listed	1
library/redis :7.4	c6eabf748fc7	glibc@2.36-9+deb12u14	no fix listed	1
library/redis :6.2	d2ad7b21cafa	glibc@2.36-9+deb12u14	no fix listed	1
library/redis :8.2.3	d31852005202	glibc@2.36-9+deb12u13	no fix listed	1