StackRadar

CVE-2026-76642

High

Advisory

Published 3 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.5
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,798
of 17,821 indexed, latest versions
Container images
2,815
deployed by those charts
Fix available
2 of 3
affected packages

CVE-2026-76642 affecting package util-linux 2.40.2-5

Carried by container images the latest versions of 2,798 of 17,821 indexed charts deploy, on 2,815 images.

Affected packageAffected versionsFixed inImages
util-linuxdeb1:2.27.1-6ubuntu3.3, 1:2.38.1-5+deb12u1, 1:2.41.5-0+deb13u1+dhi3, 1:4.16.0-2+really2.41-5+47 more2.41.5-0+deb13u1+e22,547
util-linuxapk2.41-r9, 2.41.2-r0, 2.41.4-r0, 2.42-r0+1 more2.41.6-r0, 2.42.3-r0267
util-linuxrpm2.40.2-4.azl3no fix listed1
OSV records
ALPINE-CVE-2026-76642DEBIAN-CVE-2026-76642UBUNTU-CVE-2026-76642AZL-99081ECHO-b20e-705a-6d36

Charts affected

2,798 by stars
ChartLatestAffected imagesRadar Score
filestashmt1905024.0.01 of 1See more

filestash mt190502 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
machines/filestash:latest0b8fc005e52e
util-linux@2.41.5-0+deb13u1
no fix listed

Open the chart page →

3,618
ghostmt1905028.25.11 of 3See more

ghost mt190502 8.25.1

1 of the 3 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
library/ghost:6.25.12654b1e90413
util-linux@2.38.1-5+deb12u3
no fix listed

Open the chart page →

5,043
keycloakmt1905021.4.61 of 3See more

keycloak mt190502 1.4.6

1 of the 3 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
util-linux@2.41.5-0+deb13u1
no fix listed

Open the chart page →

2,928
memosmt1905027.3.21 of 3See more

memos mt190502 7.3.2

1 of the 3 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
util-linux@2.41.5-0+deb13u1
no fix listed

Open the chart page →

2,587
minifluxmt1905021.1.61 of 3See more

miniflux mt190502 1.1.6

1 of the 3 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
util-linux@2.41.5-0+deb13u1
no fix listed

Open the chart page →

2,663
nightscoutmt1905021.1.01 of 3See more

nightscout mt190502 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
util-linux@2.34-0.1ubuntu9.6
no fix listed

Open the chart page →

6,675
open-webuimt1905022.3.101 of 3See more

open-webui mt190502 2.3.10

1 of the 3 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
util-linux@2.41.5-0+deb13u1
no fix listed

Open the chart page →

1,618
paperless-ngxmt1905027.6.143 of 4See more

paperless-ngx mt190502 7.6.14

3 of the 4 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
util-linux@2.41.5-0+deb13u1
no fix listed
library/redis:771da9275c5f3
util-linux@2.38.1-5+deb12u3
no fix listed
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
util-linux@2.41-5
no fix listed

Open the chart page →

12,164
umamimt1905028.1.41 of 3See more

umami mt190502 8.1.4

1 of the 3 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
util-linux@2.41.5-0+deb13u1
no fix listed

Open the chart page →

4,008
vaultwardenmt1905027.3.42 of 3See more

vaultwarden mt190502 7.3.4

2 of the 3 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
util-linux@2.41.5-0+deb13u1
no fix listed
vaultwarden/server:1.35.443498a94b22f
util-linux@2.41-5
no fix listed

Open the chart page →

4,754
vikunjamt1905027.1.21 of 3See more

vikunja mt190502 7.1.2

1 of the 3 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
util-linux@2.41.5-0+deb13u1
no fix listed

Open the chart page →

2,961
backendmulti-chart-app0.1.01 of 1See more

backend multi-chart-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
util-linux@2.41.5-0+deb13u1
no fix listed

Open the chart page →

1,887
frontendmulti-chart-app0.1.01 of 1See more

frontend multi-chart-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
util-linux@2.41.5-0+deb13u1
no fix listed

Open the chart page →

1,887
mongodbmulti-chart-app0.1.01 of 1See more

mongodb multi-chart-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
library/mongo:7b096b4cb9269
util-linux@2.37.2-4ubuntu3.6
no fix listed

Open the chart page →

2,007
my-multi-chart-appmulti-chart-app0.1.02 of 2See more

my-multi-chart-app multi-chart-app 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
library/mongo:7b096b4cb9269
util-linux@2.37.2-4ubuntu3.6
no fix listed
library/nginx:latest05b8cb60c354
util-linux@2.41.5-0+deb13u1
no fix listed

Open the chart page →

3,894
mum-discord-botmum-discord-botVerified publisher0.3.71 of 1See more

mum-discord-bot mum-discord-bot 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
util-linux@2.38.1-5+b1
no fix listed

Open the chart page →

13,784
devops-demomungari-development-charts1.0.42 of 4See more

devops-demo mungari-development-charts 1.0.4

2 of the 4 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
util-linux@2.41.5-0+deb13u1
no fix listed
ghcr.io/perceptolab/devops-demo-app:0.0.2cdc0658c40fb
util-linux@2.31.1-0.4ubuntu3.7
no fix listed

Open the chart page →

8,960
pagesmuthu-pages1.0.02 of 3See more

pages muthu-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
util-linux@2.34-0.1ubuntu9.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
util-linux@2.31.1-0.4ubuntu3.6
no fix listed

Open the chart page →

20,287
danboorumy0nVerified publisher0.0.21 of 1See more

danbooru my0n 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
util-linux@2.37.2-4ubuntu3
no fix listed

Open the chart page →

102,096
danbooru-stackmy0nVerified publisher0.0.31 of 4See more

danbooru-stack my0n 0.0.3

1 of the 4 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
util-linux@2.37.2-4ubuntu3
no fix listed

Open the chart page →

102,096
szurubooru-clientmy0nVerified publisher0.3.11 of 1See more

szurubooru-client my0n 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
szurubooru/client:2.5880a53ca446d
util-linux@2.42.1-r0
2.42.3-r0

Open the chart page →

371
szurubooru-servermy0nVerified publisher0.2.51 of 3See more

szurubooru-server my0n 0.2.5

1 of the 3 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
szurubooru/server:2.5accf2ad9fbc3
util-linux@2.41-r9
2.41.6-r0

Open the chart page →

1,045
clickhousemyaVerified publisher0.2403.11 of 1See more

clickhouse mya 0.2403.1

1 of the 1 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:24.2ed9640bfff07
util-linux@2.34-0.1ubuntu9.6
no fix listed

Open the chart page →

3,620
cognativemyaVerified publisher0.2403.31 of 3See more

cognative mya 0.2403.3

1 of the 3 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:24.2ed9640bfff07
util-linux@2.34-0.1ubuntu9.6
no fix listed

Open the chart page →

7,408
apachemy-chart-repo0.1.01 of 2See more

apache my-chart-repo 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
library/httpd:2.4979c38c2228d
util-linux@2.41.5-0+deb13u1
no fix listed

Open the chart page →

1,759
elasticsearch-chartmy-elasticsearch0.1.01 of 2See more

elasticsearch-chart my-elasticsearch 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.35e6ac15bf6a5
util-linux@2.34-0.1ubuntu9.3
no fix listed

Open the chart page →

9,407
my-helm-chartmy-helm-charts-2024Verified publisher0.1.01 of 1See more

my-helm-chart my-helm-charts-2024 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
shamimkuet/nginx:1.0.2b82902a76a04
util-linux@2.38.1-5+deb12u1
no fix listed

Open the chart page →

5,384
Practica_4_helmmy-heml-appVerified publisher0.1.03 of 7See more

Practica_4_helm my-heml-app 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
util-linux@2.31.1-0.4ubuntu3.7
no fix listed
library/mongo:5.0.6-focal8e70544b6c76
util-linux@2.34-0.1ubuntu9.3
no fix listed
library/rabbitmq:3.9-management8a279e9396a8
util-linux@2.37.2-4ubuntu3
no fix listed

Open the chart page →

27,947
nginx-chartmyk8scharts1.0.01 of 1See more

nginx-chart myk8scharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
util-linux@2.41.5-0+deb13u1
no fix listed

Open the chart page →

1,887
nginx-appmy-nginx-app0.1.31 of 1See more

nginx-app my-nginx-app 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
util-linux@2.41.5-0+deb13u1
no fix listed

Open the chart page →

1,887
influxdbmy-personal-influxdb20.1.01 of 1See more

influxdb my-personal-influxdb2 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
library/influxdb:2.7b8d940ca9376
util-linux@2.38.1-5+deb12u3
no fix listed

Open the chart page →

3,924
helloworldmysql2s3bk0.1.01 of 1See more

helloworld mysql2s3bk 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
util-linux@2.41.5-0+deb13u1
no fix listed

Open the chart page →

1,887
mystoremystore-chart0.1.02 of 3See more

mystore mystore-chart 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
hazegoodlife/haaze:veggiesite50f02d2d5d4d
util-linux@2.38.1-5+deb12u3
no fix listed
hazegoodlife/haaze:milksite8d4c63169e14
util-linux@2.38.1-5+deb12u3
no fix listed

Open the chart page →

9,700
myweatherhelmmyweather1.3.113 of 7See more

myweatherhelm myweather 1.3.11

3 of the 7 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
hecrom/myweatherangularclient:1.3.11bb0372939c19
util-linux@2.38.1-5+deb12u1
no fix listed
library/rabbitmq:3-managemente582c0bc7766
util-linux@2.39.3-9ubuntu6.3
no fix listed
mcr.microsoft.com/mssql/server:2017-latestfbf79e0fea59
util-linux@2.31.1-0.4ubuntu3.7
no fix listed

Open the chart page →

18,211
my-nginxna-helm-chartsVerified publisher1.0.01 of 1See more

my-nginx na-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
util-linux@2.41.5-0+deb13u1
no fix listed

Open the chart page →

1,593
dependency-tracknaj980.0.92 of 3See more

dependency-track naj98 0.0.9

2 of the 3 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
dependencytrack/apiserver:latestf1da63ed610a
util-linux@2.41-5
no fix listed
dependencytrack/frontend:latest8854a8320475
util-linux@2.41.4-r0
2.41.6-r0

Open the chart page →

2,509
smallandnaj980.0.51 of 1See more

smalland naj98 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
ghcr.io/98jan/smalland-server/smalland-server:deveb7be822d5b2
util-linux@2.31.1-0.4ubuntu3.7
no fix listed

Open the chart page →

3,044
pagesnarain1.0.02 of 3See more

pages narain 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
util-linux@2.34-0.1ubuntu9.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
util-linux@2.31.1-0.4ubuntu3.6
no fix listed

Open the chart page →

20,287
pagesnarasimha-pages1.0.02 of 3See more

pages narasimha-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
util-linux@2.34-0.1ubuntu9.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
util-linux@2.31.1-0.4ubuntu3.6
no fix listed

Open the chart page →

20,287
akauntingnas-helm-chartsVerified publisher1.0.31 of 2See more

akaunting nas-helm-charts 1.0.3

1 of the 2 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
akaunting/akaunting:3.0.1552811b36ec3a
util-linux@2.38.1-5+b1
no fix listed

Open the chart page →

12,970
pagesnavin-brixton1.0.02 of 3See more

pages navin-brixton 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
util-linux@2.34-0.1ubuntu9.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
util-linux@2.31.1-0.4ubuntu3.6
no fix listed

Open the chart page →

20,287
fahncsaVerified publisher1.1.11 of 1See more

fah ncsa 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
linuxserver/foldingathome:8.5.6ebb32940e4bb
util-linux@2.39.3-9ubuntu6.6
no fix listed

Open the chart page →

889
incorencsaVerified publisher1.38.02 of 29See more

incore ncsa 1.38.0

2 of the 29 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
util-linux@2.38.1-5+deb12u1
no fix listed
bitnamilegacy/postgresql:16.4.03ba6e6f11388
util-linux@2.38.1-5+deb12u2
no fix listed

Open the chart page →

15,395
jupyterhub-metricsncsaVerified publisher1.3.01 of 5See more

jupyterhub-metrics ncsa 1.3.0

1 of the 5 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
timescale/timescaledb:latest-pg156343bdc87ca1
util-linux@2.41-r9
2.41.6-r0

Open the chart page →

3,212
smilencsaVerified publisher1.1.07 of 23See more

smile ncsa 1.1.0

7 of the 23 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
socialmediamacroscope/autophrase:0.1.570fb11d4f531
util-linux@2.34-0.1ubuntu9.4
no fix listed
socialmediamacroscope/collect_reddit_comment:0.1.219d3d26d53ee
util-linux@2.31.1-0.4ubuntu3.7
no fix listed
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
util-linux@2.38.1-5+b1
no fix listed
socialmediamacroscope/image_crawler:0.1.2f508216be63c
util-linux@2.31.1-0.4ubuntu3.7
no fix listed
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
util-linux@2.38.1-5+b1
no fix listed
socialmediamacroscope/preprocessing:0.1.3ca863306314b
util-linux@2.38.1-5+b1
no fix listed
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
util-linux@2.38.1-5+b1
no fix listed

Open the chart page →

279,500
uptime-kumancsaVerified publisher1.7.31 of 1See more

uptime-kuma ncsa 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.5c74379ac4509
util-linux@2.38.1-5+deb12u3
no fix listed

Open the chart page →

30,728
neosyncneosyncVerified publisher0.5.412 of 3See more

neosync neosync 0.5.41

2 of the 3 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
util-linux@2.38.1-5+deb12u3
no fix listed
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
util-linux@2.38.1-5+deb12u3
no fix listed

Open the chart page →

7,336
apineosync-apiVerified publisher0.5.411 of 1See more

api neosync-api 0.5.41

1 of the 1 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
util-linux@2.38.1-5+deb12u3
no fix listed

Open the chart page →

2,892
workerneosync-workerVerified publisher0.5.411 of 1See more

worker neosync-worker 0.5.41

1 of the 1 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
util-linux@2.38.1-5+deb12u3
no fix listed

Open the chart page →

2,869
core-keeper-dedicatednerkho-helm-charts0.1.11 of 1See more

core-keeper-dedicated nerkho-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-76642.

Container imageDigestPackageFixed in
escaping/core-keeper-dedicated:latest87fa79255962
util-linux@2.41-5
no fix listed

Open the chart page →

3,973

Container images carrying it

2,815 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee:v19.4.02256b49461fa
util-linux@2.41.5-0+deb13u1
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/kubectl:v19.4.048ee51dd67d4
util-linux@2.41.5-0+deb13u1
no fix listed
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
util-linux@2.34-0.1ubuntu9.1
no fix listed
1
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-platform:prod61ff9287923a
util-linux@2.42.1-r0
2.42.3-r0
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
util-linux@2.38.1-5+deb12u3
no fix listed
1
registry.gitlab.com/technostructures/posca/posca:latesta693021686ca
util-linux@2.41.4-r0
2.41.6-r0
1
registry.gitlab.com/xrow-public/helm-smtp/postfix:1.3.37eea4f0883dd
util-linux@2.41.4-r0
2.41.6-r0
1
registry.k8s.io/csi-secrets-store/driver:v1.6.1b48d7d13dd06
util-linux@2.38.1-5+deb12u3
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
util-linux@2.41-5
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
util-linux@2.38.1-5+deb12u1
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
util-linux@2.38.1-5+deb12u3
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
util-linux@2.38.1-5+deb12u3
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
util-linux@2.38.1-5+deb12u3
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
util-linux@2.38.1-5+deb12u3
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
util-linux@2.38.1-5+deb12u3
no fix listed
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.