CVE-2026-64600

High

Advisory

Published 23 Jul 2026In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.8; base score, highest
EPSS: 0.005; 39th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 6; of 17,781 indexed, latest versions
Container images: 7; deployed by those charts
Fix available: 1 of 1; affected package

Red Hat Bug Fix Advisory: kernel bug fix and enhancement update

Carried by container images the latest versions of 6 of 17,781 indexed charts deploy, on 7 images.

Affected package	Affected versions	Fixed in	Images
kernelrpm	4.18.0-372.32.1.el8_6, 5.14.0-427.18.1.el9_4, 5.14.0-427.35.1.el9_4, 5.14.0-611.7.1.el9_7+2 more	0:4.18.0-372.202.1.el8_6, 0:5.14.0-687.26.1.el9_8	7

OSV records: RHBA-2026:39332 RHBA-2026:41254

Charts affected

6 by stars

Chart

Latest

Affected images

Radar Score

hpe-greenlake-file-csi-driverhpe-storage

2.6.4

1 of 7 See more

hpe-greenlake-file-csi-driver hpe-storage 2.6.4

1 of the 7 container images this version deploys carry CVE-2026-64600.

Container image	Digest	Package	Fixed in
quay.io/hpestorage/filex-csi-driver :2.6.4	b7f960bbf472	kernel@5.14.0-611.7.1.el9_7	0:5.14.0-687.26.1.el9_8

Open the chart page →

6,095

jetic-operatorjetic-operator

2.0.2

1 of 1 See more

jetic-operator jetic-operator 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-64600.

Container image	Digest	Package	Fixed in
apache/camel-k :1.10.4	3bb13d14f64a	kernel@4.18.0-372.32.1.el8_6	0:4.18.0-372.202.1.el8_6

Open the chart page →

9,318

iframelyiframely

2.3.5

1 of 1 See more

iframely iframely 2.3.5

1 of the 1 container images this version deploys carry CVE-2026-64600.

Container image	Digest	Package	Fixed in
registry.gitlab.com/xrow-public/helm-iframely/iframely :2.3.5	fcf07d5ff7e2	kernel@5.14.0-611.47.1.el9_7	0:5.14.0-687.26.1.el9_8

Open the chart page →

3,154

neurofaceneuroface

1.4.2

1 of 3 See more

neuroface neuroface 1.4.2

1 of the 3 container images this version deploys carry CVE-2026-64600.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/neuroface-backend :v1.4.1	3194d46df0f9	kernel@5.14.0-687.10.1.el9_8	0:5.14.0-687.26.1.el9_8

Open the chart page →

7,310

chatbot-ai-sampleopenshift

0.1.6

2 of 4 See more

chatbot-ai-sample openshift 0.1.6

2 of the 4 container images this version deploys carry CVE-2026-64600.

Container image	Digest	Package	Fixed in
quay.io/ai-lab/llamacpp_python :latest	70d138997acd	kernel@5.14.0-427.35.1.el9_4	0:5.14.0-687.26.1.el9_8
quay.io/redhat-ai-dev/chatbot :latest	59fe607dfdf2	kernel@5.14.0-427.18.1.el9_4	0:5.14.0-687.26.1.el9_8

Open the chart page →

18,922

rhbk-neurofacerhbk-neuroface

1.0.0

1 of 4 See more

rhbk-neuroface rhbk-neuroface 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-64600.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/neuroface-backend :latest	cba71dc08c8a	kernel@5.14.0-687.10.1.el9_8	0:5.14.0-687.26.1.el9_8

Open the chart page →

3,781

Container images carrying it

7 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
apache/camel-k :1.10.4	3bb13d14f64a	kernel@4.18.0-372.32.1.el8_6	0:4.18.0-372.202.1.el8_6	1
quay.io/ai-lab/llamacpp_python :latest	70d138997acd	kernel@5.14.0-427.35.1.el9_4	0:5.14.0-687.26.1.el9_8	1
quay.io/hpestorage/filex-csi-driver :2.6.4	b7f960bbf472	kernel@5.14.0-611.7.1.el9_7	0:5.14.0-687.26.1.el9_8	1
quay.io/maximilianopizarro/neuroface-backend :v1.4.1	3194d46df0f9	kernel@5.14.0-687.10.1.el9_8	0:5.14.0-687.26.1.el9_8	1
quay.io/maximilianopizarro/neuroface-backend :latest	cba71dc08c8a	kernel@5.14.0-687.10.1.el9_8	0:5.14.0-687.26.1.el9_8	1
quay.io/redhat-ai-dev/chatbot :latest	59fe607dfdf2	kernel@5.14.0-427.18.1.el9_4	0:5.14.0-687.26.1.el9_8	1
registry.gitlab.com/xrow-public/helm-iframely/iframely :2.3.5	fcf07d5ff7e2	kernel@5.14.0-611.47.1.el9_7	0:5.14.0-687.26.1.el9_8	1