StackRadar

CVE-2026-76642

High

Advisory

Published 3 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.5
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,750
of 17,821 indexed, latest versions
Container images
2,753
deployed by those charts
Fix available
2 of 3
affected packages

CVE-2026-76642 affecting package util-linux 2.40.2-5

Carried by container images the latest versions of 2,750 of 17,821 indexed charts deploy, on 2,753 images.

Affected packageAffected versionsFixed inImages
util-linuxdeb1:2.27.1-6ubuntu3.3, 1:2.38.1-5+deb12u1, 1:2.41.5-0+deb13u1+dhi3, 1:4.16.0-2+really2.41-5+47 more2.41.5-0+deb13u1+e22,487
util-linuxapk2.41-r9, 2.41.2-r0, 2.41.4-r0, 2.42-r0+1 more2.41.6-r0, 2.42.3-r0265
util-linuxrpm2.40.2-4.azl3no fix listed1
OSV records
ALPINE-CVE-2026-76642DEBIAN-CVE-2026-76642UBUNTU-CVE-2026-76642AZL-99081ECHO-b20e-705a-6d36

Charts affected

2,750 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,753 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/squent/kuma-ingress-watcher:1.7.014d45b2a1f00
util-linux@2.38.1-5+deb12u3
no fix listed
1
ghcr.io/stac-utils/stac-fastapi-pgstac:7.0.08b026c47cc1b
util-linux@2.41.5-0+deb13u1
no fix listed
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
util-linux@2.34-0.1ubuntu9.3
no fix listed
1
ghcr.io/steadybit/agent:2.4.6d246bfa55f63
util-linux@2.41.5-0+deb13u1
no fix listed
1
ghcr.io/steadybit/extension-container:v1.8.1ae79f958b479
util-linux@2.41.5-0+deb13u1
no fix listed
1
ghcr.io/steadybit/extension-host:v1.8.103a5ef26aac5
util-linux@2.41.5-0+deb13u1
no fix listed
1
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
util-linux@2.39.3-9ubuntu6.5
no fix listed
1
ghcr.io/streamingfast/firehose-core:v1.12.391fca773a63f
util-linux@2.39.3-9ubuntu6.3
no fix listed
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.489969b78fb07
util-linux@2.39.3-9ubuntu6.3
no fix listed
1
ghcr.io/streamingfast/firehose-ethereum:v2.14.3bf816072380e
util-linux@2.39.3-9ubuntu6.3
no fix listed
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
util-linux@2.39.3-9ubuntu6.3
no fix listed
1
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
util-linux@2.39.3-9ubuntu6.4
no fix listed
1
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
util-linux@2.34-0.1ubuntu9.6
no fix listed
1
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
util-linux@2.34-0.1ubuntu9.6
no fix listed
1
ghcr.io/streamvisor/streamvisor:4.1.40bc598b2ac9a
util-linux@2.39.3-9ubuntu6.5
no fix listed
1
ghcr.io/strrl/wonder-mesh-net:v2026.629.0625b140372fd
util-linux@2.38.1-5+deb12u3
no fix listed
1
ghcr.io/substra/substra-backend:1.0.121967f54ec86
util-linux@2.39.3-9ubuntu6.2
no fix listed
1
ghcr.io/substra/substra-frontend:1.0.0e230e6ac0722
util-linux@1:2.38.1-5+deb12u1
no fix listed
1
ghcr.io/sudo-kraken/3d-printing-cost-calculators:v1.1.1220c5e4e1a3d
util-linux@2.38.1-5+deb12u3
no fix listed
1
ghcr.io/sudo-kraken/authentik-webfinger-proxy:v1.1.1e1351a977607
util-linux@2.38.1-5+deb12u3
no fix listed
1
ghcr.io/sudo-kraken/fantasy-dice-chamber:v1.3.299fd4cb0f4fe
util-linux@2.38.1-5+deb12u3
no fix listed
1
ghcr.io/sudo-kraken/finances-tracker:v1.1.1c73527cde81c
util-linux@2.38.1-5+deb12u3
no fix listed
1
ghcr.io/sudo-kraken/jf-pushover-webhook:v1.1.0ee9cf22a39ab
util-linux@2.38.1-5+deb12u3
no fix listed
1
ghcr.io/suwayomi/suwayomi-server:v2.3.2320d2c3218c7f9f
util-linux@2.39.3-9ubuntu6.5
no fix listed
1
ghcr.io/tarampampam/video-dl-bot:1.4.36daa2dc7556b
util-linux@2.41.5-0+deb13u1
no fix listed
1
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
util-linux@2.38.1-5+b1
no fix listed
1
ghcr.io/teq-cloud/iteq-web:0.3.3-beta0acbe2f2e1ea
util-linux@2.41.4-r0
2.41.6-r0
1
ghcr.io/terminus-io/enforcer:v1.1.0f21b905610d6
util-linux@2.42.1-r0
2.42.3-r0
1
ghcr.io/theduffman85/crowdsec-web-ui:2026.8.3bfadbab9a72c
util-linux@2.41.5-0+deb13u1
no fix listed
1
ghcr.io/toeverything/affine:0.27.4b649f5ce2384
util-linux@2.38.1-5+deb12u3
no fix listed
1
ghcr.io/topolvm/pie:0.18.0aa467443e407
util-linux@2.37.2-4ubuntu3.5
no fix listed
1
ghcr.io/topolvm/topolvm-with-sidecar:0.41.170548dbe0c6a
util-linux@2.37.2-4ubuntu3.5
no fix listed
1
ghcr.io/topolvm/topolvm-with-sidecar:0.35.0b354978c440d
util-linux@2.37.2-4ubuntu3.4
no fix listed
1
ghcr.io/trow-registry/trow:0.10.075b7d2dcdb91
util-linux@2.41-5
no fix listed
1
ghcr.io/turbot/guardrails-agent-kubernetes:0.3.09d01bf9c9224
util-linux@2.39.3-9ubuntu6.1
no fix listed
1
ghcr.io/twigex/cospace:lateste5ecfd607e42
util-linux@2.38.1-5+deb12u3
no fix listed
1
ghcr.io/unique-ag/ai/search-proxy:2026.38.0aa6699b027bb
util-linux@2.41-5
no fix listed
1
ghcr.io/upcloudltd/upcloud-csi5af91c663788
util-linux@2.41.4-r0
2.41.6-r0
1
ghcr.io/utkuozdemir/nvidia_gpu_exporter:1.5.0d75967a4dd72
util-linux@2.41.3-3ubuntu2
no fix listed
1
ghcr.io/valkey-io/valkey:9.0.4-alpine3.23107b203169a2
util-linux@2.41.4-r0
2.41.6-r0
1
ghcr.io/vinny1892/octantis:latest45459c0910fc
util-linux@2.41-5
no fix listed
1
ghcr.io/virtuos/librechat_exporter:2.0.050ea1cf0086f
util-linux@2.38.1-5+deb12u3
no fix listed
1
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
util-linux@2.37.2-4ubuntu3
no fix listed
1
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
util-linux@2.37.2-4ubuntu3
no fix listed
1
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
util-linux@2.37.2-4ubuntu3.4
no fix listed
1
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
util-linux@2.38.1-5+b1
no fix listed
1
ghcr.io/wearefrank/frank-gateway:1.0.05ccf797ccdf1
util-linux@2.39.3-9ubuntu6.5
no fix listed
1
ghcr.io/wekan/ferretdb:latestebed9a5eaae0
util-linux@2.41.5-0+deb13u1
no fix listed
1
ghcr.io/wgbh-mla/chowda:main86ab9effd1a5
util-linux@2.41.5-0+deb13u1
no fix listed
1
ghcr.io/wgbh-mla/ov-wag:v1.1.06df27f944fe8
util-linux@2.38.1-5+deb12u3
no fix listed
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.