StackRadar

CVE-2026-76642

High

Advisory

Published 3 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.5
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,738
of 17,828 indexed, latest versions
Container images
2,748
deployed by those charts
Fix available
2 of 3
affected packages

CVE-2026-76642 affecting package util-linux 2.40.2-5

Carried by container images the latest versions of 2,738 of 17,828 indexed charts deploy, on 2,748 images.

Affected packageAffected versionsFixed inImages
util-linuxdeb1:2.27.1-6ubuntu3.3, 1:2.38.1-5+deb12u1, 1:2.41.5-0+deb13u1+dhi3, 1:4.16.0-2+really2.41-5+47 more2.41.5-0+deb13u1+e22,488
util-linuxapk2.41-r9, 2.41.2-r0, 2.41.4-r0, 2.42-r0+1 more2.41.6-r0, 2.42.3-r0259
util-linuxrpm2.40.2-4.azl3no fix listed1
OSV records
ALPINE-CVE-2026-76642DEBIAN-CVE-2026-76642UBUNTU-CVE-2026-76642AZL-99081ECHO-b20e-705a-6d36

Charts affected

2,738 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,748 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
library/postgres:14816cf7d06ec3
util-linux@2.41.5-0+deb13u1
no fix listed
5
library/postgres:18.6-alpine:18-alpine:alpined3e1620b530c
util-linux@2.42.1-r0
2.42.3-r0
5
library/postgres:15dfbbb0ad8cab
util-linux@2.41.5-0+deb13u1
no fix listed
5
library/redis:7.2:7.2-bookworm0637954999d0
util-linux@2.38.1-5+deb12u3
no fix listed
5
library/redis:6:6.2e7b96daa9a18
util-linux@2.38.1-5+deb12u3
no fix listed
5
solsson/kafka:latest41e5d8f6f290
util-linux@2.34-0.1ubuntu9.3
no fix listed
5
valkey/valkey:9.1.1:9.1.1-trixie64e361b630ec
util-linux@2.41.5-0+deb13u1
no fix listed
5
vaultwarden/server:1.37.2:latest094b5689ed81
util-linux@2.41-5
no fix listed
5
ecr-public.aws.com/docker/library/redis:8.6.4-alpine2cc044fc5a07
util-linux@2.41.4-r0
2.41.6-r0
5
quay.io/kiwigrid/k8s-sidecar:2.8.1abb55b2165c6
util-linux@2.41-r9
2.41.6-r0
5
artifacthub/postgres:latest4fd34fa635cc
util-linux@2.41-5
no fix listed
4
bitnamilegacy/mariadb:12.0.2-debian-12-r0888cdaae3cb9
util-linux@2.38.1-5+deb12u3
no fix listed
4
bitnamilegacy/mysql:9.4.0-debian-12-r1ec13e229247a
util-linux@2.38.1-5+deb12u3
no fix listed
4
bitnamilegacy/postgresql:16233f361c5819
util-linux@2.38.1-5+deb12u2
no fix listed
4
bitnamilegacy/rabbitmq:4.1.2:4.1.2-debian-12-r1fac502149c40
util-linux@2.38.1-5+deb12u3
no fix listed
4
hyperledger/fabric-ca:latesta70b6ba64a08
util-linux@2.37.2-4ubuntu3.5
no fix listed
4
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
util-linux@2.27.1-6ubuntu3.4
no fix listed
4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
util-linux@2.27.1-6ubuntu3.6
no fix listed
4
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
util-linux@2.37.2-4ubuntu3
no fix listed
4
library/mongo:5.0-focal5e15a3f014ed
util-linux@2.34-0.1ubuntu9.6
no fix listed
4
library/mongo:4.2.12-bionic628741415fc9
util-linux@2.31.1-0.4ubuntu3.7
no fix listed
4
library/mongo:4.4.66efa05203990
util-linux@2.31.1-0.4ubuntu3.7
no fix listed
4
library/nginx:1.27.1287ff321f9e3
util-linux@2.38.1-5+deb12u1
no fix listed
4
library/postgres:17-alpine18cfe3ef5e68
util-linux@2.42.1-r0
2.42.3-r0
4
library/postgres:134689940c6838
util-linux@2.41-5
no fix listed
4
library/postgres:1767f41722b7a8
util-linux@2.41.5-0+deb13u1
no fix listed
4
library/postgres:16f1c3376c26f2
util-linux@2.41.5-0+deb13u1
no fix listed
4
library/rabbitmq:3.11-managementc3f70098e01d
util-linux@2.37.2-4ubuntu3
no fix listed
4
library/redis:7:7.4:7.4.1171da9275c5f3
util-linux@2.38.1-5+deb12u3
no fix listed
4
mastercloudapps/planner:v1.2340a950b311b2
util-linux@2.37.2-4ubuntu3
no fix listed
4
opea/llm-tgi:1.00c25aab3f106
util-linux@2.38.1-5+deb12u1
no fix listed
4
oscarsotosanchez/weatherservice:v1.0911ec961d10b
util-linux@2.31.1-0.4ubuntu3.7
no fix listed
4
shashkist/flask-contacts-app:latest581de1fd6084
util-linux@2.38.1-5+deb12u2
no fix listed
4
valkey/valkey:9.0.2930b41430fb7
util-linux@2.41-5
no fix listed
4
ghcr.io/foundry-rs/foundry:latest0c00cb0bda1a
util-linux@2.37.2-4ubuntu3.5
no fix listed
4
ghcr.io/home-assistant/home-assistant:2026.9.3:latestd89226851697
util-linux@2.42.1-r0
2.42.3-r0
4
quay.io/argoproj/argocd:v3.5.3dd3f47d5a5e4
util-linux@2.41.3-3ubuntu2.2
no fix listed
4
aktosecurity/akto-puppeteer-replay:latest3aa7b960bf32
util-linux@2.42.1-r0
2.42.3-r0
3
apache/apisix:3.18.0-ubuntu9ee5df1611f9
util-linux@2.39.3-9ubuntu6.5
no fix listed
3
apache/superset:6.1.0:latest16b50bbef664
util-linux@2.38.1-5+deb12u3
no fix listed
3
bitnamilegacy/etcd:latest99b408c15272
util-linux@2.38.1-5+deb12u3
no fix listed
3
bitnamilegacy/kubectl:latestcd354d5b2556
util-linux@2.38.1-5+deb12u3
no fix listed
3
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
util-linux@2.38.1-5+deb12u3
no fix listed
3
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
util-linux@2.38.1-5+deb12u3
no fix listed
3
bitnamilegacy/postgresql:17.6.0-debian-12-r0de520acd66fc
util-linux@2.38.1-5+deb12u3
no fix listed
3
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
util-linux@2.38.1-5+deb12u2
no fix listed
3
bitnamilegacy/postgresql-repmgr:17.6.0-debian-12-r2f12387ec882b
util-linux@2.38.1-5+deb12u3
no fix listed
3
bitnamilegacy/valkey-cluster:8.1.3-debian-12-r332869e769b7e
util-linux@2.38.1-5+deb12u3
no fix listed
3
ciscolabs/rtsp-client:latesta7b60ec88285
util-linux@2.34-0.1ubuntu9.3
no fix listed
3
ciscolabs/rtsp-server:latestb59fc10bb821
util-linux@2.34-0.1ubuntu9.3
no fix listed
3

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.