StackRadar

CVE-2026-78408

High

Advisory

Published 2 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.9
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,738
of 17,828 indexed, latest versions
Container images
2,748
deployed by those charts
Fix available
2 of 3
affected packages

CVE-2026-78408 affecting package util-linux 2.40.2-5

Carried by container images the latest versions of 2,738 of 17,828 indexed charts deploy, on 2,748 images.

Affected packageAffected versionsFixed inImages
util-linuxdeb1:2.27.1-6ubuntu3.3, 1:2.38.1-5+deb12u1, 1:2.41.5-0+deb13u1+dhi3, 1:4.16.0-2+really2.41-5+47 more2.41.5-0+deb13u1+e22,488
util-linuxapk2.41-r9, 2.41.2-r0, 2.41.4-r0, 2.42-r0+1 more2.41.6-r1, 2.42.3-r1259
util-linuxrpm2.40.2-4.azl3no fix listed1
OSV records
ALPINE-CVE-2026-78408DEBIAN-CVE-2026-78408UBUNTU-CVE-2026-78408AZL-99393ECHO-3f6d-9602-8caa

Charts affected

2,738 by stars
ChartLatestAffected imagesRadar Score
openhabhelmforgeVerified publisher1.2.01 of 1See more

openhab helmforge 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
openhab/openhab:5.2.1bfd4a60e90da
util-linux@2.41-5
no fix listed

Open the chart page →

3,695
postgresqlhelmforgeVerified publisher2.0.51 of 1See more

postgresql helmforge 2.0.5

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie86c951e05bf5
util-linux@2.41.5-0+deb13u1
no fix listed

Open the chart page →

1,272
umamihelmforgeVerified publisher2.3.31 of 3See more

umami helmforge 2.3.3

1 of the 3 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie86c951e05bf5
util-linux@2.41.5-0+deb13u1
no fix listed

Open the chart page →

1,673
openctihelm-openctiVerified publisher3.0.112 of 8See more

opencti helm-opencti 3.0.11

2 of the 8 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.2-debian-12-r1fac502149c40
util-linux@2.38.1-5+deb12u3
no fix listed
opencti/worker:7.260917.0ba2e9dc05140
util-linux@2.42.1-r0
2.42.3-r1

Open the chart page →

3,360
hertzbeathertzbeatOfficialVerified publisher1.8.13 of 4See more

hertzbeat hertzbeat 1.8.1

3 of the 4 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
apache/hertzbeat:1.8.075d48a62748f
util-linux@2.39.3-9ubuntu6.4
no fix listed
apache/hertzbeat-collector:1.8.0a2bab1be574c
util-linux@2.39.3-9ubuntu6.4
no fix listed
library/postgres:15dfbbb0ad8cab
util-linux@2.41.5-0+deb13u1
no fix listed

Open the chart page →

13,948
infrahubinfrahubVerified publisher4.33.24 of 5See more

infrahub infrahub 4.33.2

4 of the 5 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
util-linux@2.38.1-5+deb12u2
no fix listed
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
util-linux@2.38.1-5+deb12u3
no fix listed
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
util-linux@2.38.1-5+deb12u3
no fix listed
library/neo4j:2026.05.06c162e2432f8
util-linux@2.41-5
no fix listed

Open the chart page →

10,417
jenkinsjenkins-helm-chartVerified publisher0.1.01 of 1See more

jenkins jenkins-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
util-linux@2.41.5-0+deb13u1
no fix listed

Open the chart page →

2,451
plexk8s-home-lab-repo7.3.11 of 1See more

plex k8s-home-lab-repo 7.3.1

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
ghcr.io/home-operations/plex:1.43.1a9c3723cb31c
util-linux@2.39.3-9ubuntu6.5
no fix listed

Open the chart page →

1,757
kamu-api-serverkamuVerified publisher0.90.01 of 1See more

kamu-api-server kamu 0.90.0

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
ghcr.io/kamu-data/kamu-api-server:0.90.0e61435d44913
util-linux@2.34-0.1ubuntu9.6
no fix listed

Open the chart page →

6,395
kubeflowkubeflow1.6.25 of 45See more

kubeflow kubeflow 1.6.2

5 of the 45 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
istio/proxyv2:1.9.687a9db561d2e
util-linux@2.31.1-0.4ubuntu3.7
no fix listed
istio/proxyv2:1.14.1df69c1a7af7c
util-linux@2.34-0.1ubuntu9.3
no fix listed
library/python:3.7eedf63967cdb
util-linux@2.38.1-5+b1
no fix listed
gcr.io/ml-pipeline/metadata-envoy:2.0.0-alpha.5e8bc6cf08613
util-linux@2.27.1-6ubuntu3.9
no fix listed
gcr.io/tfx-oss-public/ml_metadata_store_server:1.5.0db8691752b4c
util-linux@2.31.1-0.4ubuntu3.7
no fix listed

Open the chart page →

161,824
kubernetes-loggingkubernetes-logging4.8.01 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
util-linux@2.34-0.1ubuntu9.4
no fix listed

Open the chart page →

10,713
testkubekubeshop2.13.32See more

testkube kubeshop 2.13.3

2 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
kubeshop/bitnami-mongodb:8.3.8d48b172d99d8
util-linux@2.39.3-9ubuntu6.5
no fix listed
kubeshop/testkube-minio:2025.10d8e1af6aca99
util-linux@2.38.1-5+deb12u3
no fix listed

Open the chart page →

—
venti-stackkuossOfficialVerified publisher0.5.01 of 9See more

venti-stack kuoss 0.5.0

1 of the 9 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
ghcr.io/kuoss/lethe:v0.3.3ebdf55fd5705
util-linux@2.41-r9
2.41.6-r1

Open the chart page →

3,861
librechatlibrechat-openshiftVerified publisher1.9.02 of 3See more

librechat librechat-openshift 1.9.0

2 of the 3 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
library/mongo:8.0.20098862b1339f
util-linux@2.39.3-9ubuntu6.5
no fix listed
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
util-linux@2.38.1-5+deb12u2
no fix listed

Open the chart page →

5,824
libredb-studiolibredb-studioVerified publisher0.1.671 of 1See more

libredb-studio libredb-studio 0.1.67

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
ghcr.io/libredb/libredb-studio:0.16.2c398419c29a7
util-linux@2.41.5-0+deb13u1
no fix listed

Open the chart page →

1,201
local-ailocalai3.4.21 of 1See more

local-ai localai 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
quay.io/go-skynet/local-ai:latest0632c21ddbe4
util-linux@2.39.3-9ubuntu6.6
no fix listed

Open the chart page →

3,723
headplanenbcloudVerified publisher0.1.21 of 4See more

headplane nbcloud 0.1.2

1 of the 4 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:latestcd354d5b2556
util-linux@2.38.1-5+deb12u3
no fix listed

Open the chart page →

8,067
open5gsopen5gsVerified publisher2.3.41 of 5See more

open5gs open5gs 2.3.4

1 of the 5 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
gradiant/open5gs-dbctl:0.10.3332031245fce
util-linux@2.39.3-9ubuntu6.2
no fix listed

Open the chart page →

9,344
ubuntuopen-charts1.2.11 of 1See more

ubuntu open-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
library/ubuntu:22.04b8b6ee6aa931
util-linux@2.37.2-4ubuntu3.6
no fix listed

Open the chart page →

1,476
mattermostphntom3.24.01 of 2See more

mattermost phntom 3.24.0

1 of the 2 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
phntom/mattermost-team-edition:9.3.051cf9da4aa2e
util-linux@2.37.2-4ubuntu3
no fix listed

Open the chart page →

8,810
unifi-controllerqonstruktVerified publisher2.6.11 of 1See more

unifi-controller qonstrukt 2.6.1

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:8.0.240ae315a3a456
util-linux@2.34-0.1ubuntu9.4
no fix listed

Open the chart page →

10,643
scm-managerscm-manager3.12.11 of 1See more

scm-manager scm-manager 3.12.1

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
scmmanager/scm-manager:3.12.1bfb766050f34
util-linux@2.41.4-r0
2.41.6-r1

Open the chart page →

677
manyfoldself-hosters-by-nightVerified publisher0.7.41 of 1See more

manyfold self-hosters-by-night 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
ghcr.io/manyfold3d/manyfold-solo:0.147.2ed5a792b0e8d
util-linux@2.42.1-r0
2.42.3-r1

Open the chart page →

481
sops-secrets-operatorsops-secrets-operatorVerified publisher0.28.11 of 1See more

sops-secrets-operator sops-secrets-operator 0.28.1

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
quay.io/isindir/sops-secrets-operator:0.21.27bba7083dfa0
util-linux@2.41.3-3ubuntu2
no fix listed

Open the chart page →

857
steampipe-powerpipe-kubernetessteampipe-powerpipe-kubernetesVerified publisher0.13.12 of 2See more

steampipe-powerpipe-kubernetes steampipe-powerpipe-kubernetes 0.13.1

2 of the 2 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe:latesta16ab5ca10a7
util-linux@2.38.1-5+deb12u3
no fix listed
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe:latestc0c8d53df9f3
util-linux@2.38.1-5+deb12u3
no fix listed

Open the chart page →

5,490
topolvmtopolvmVerified publisher17.2.01 of 1See more

topolvm topolvm 17.2.0

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
ghcr.io/topolvm/topolvm-with-sidecar:0.41.170548dbe0c6a
util-linux@2.37.2-4ubuntu3.5
no fix listed

Open the chart page →

2,415
uffizzi-appuffizzi-app1.3.01 of 14See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
util-linux@2.38.1-5+b1
no fix listed

Open the chart page →

19,390
athens-proxyvolker-raschekVerified publisher2.0.31 of 1See more

athens-proxy volker-raschek 2.0.3

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
gomods/athens:v0.17.10f61d1e62359
util-linux@2.41.4-r0
2.41.6-r1

Open the chart page →

2,047
reposilitevolker-raschekVerified publisher1.0.01 of 1See more

reposilite volker-raschek 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
dzikoysk/reposilite:3.5.264128c2d7a6ba
util-linux@2.39.3-9ubuntu6.3
no fix listed

Open the chart page →

3,032
dexwiremindVerified publisher2.15.71 of 2See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
gcr.io/google_containers/kubernetes-dashboard-init-amd64:v1.0.0fbe12aa24de6
util-linux@2.27.1-6ubuntu3.3
no fix listed

Open the chart page →

13,600
grafana-pdf-exporterwiremindVerified publisher2.1.11 of 1See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
util-linux@2.38.1-5+b1
no fix listed

Open the chart page →

9,666
matrixzekker6Verified publisher3.31.01 of 4See more

matrix zekker6 3.31.0

1 of the 4 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.161.06b95dd129e35
util-linux@2.41.5-0+deb13u1
no fix listed

Open the chart page →

5,662
zenmlzenml0.96.41 of 1See more

zenml zenml 0.96.4

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
zenmldocker/zenml-server:0.96.409027a6312ee
util-linux@2.38.1-5+deb12u3
no fix listed

Open the chart page →

1,315
eshoponabpabp-charts1.0.01 of 15See more

eshoponabp abp-charts 1.0.0

1 of the 15 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
library/mongo:4.2699d652ed674
util-linux@2.31.1-0.4ubuntu3.7
no fix listed

Open the chart page →

19,515
changedetectionalekcVerified publisher0.14.51 of 1See more

changedetection alekc 0.14.5

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.7096dae27b5d6
util-linux@2.38.1-5+deb12u3
no fix listed

Open the chart page →

2,710
code-serveralekcVerified publisher0.1.11 of 1See more

code-server alekc 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
linuxserver/code-server:4.10.1a5e43a05ae79
util-linux@2.37.2-4ubuntu3
no fix listed

Open the chart page →

8,291
vaultwardenandrenarchyVerified publisher6.28.01 of 1See more

vaultwarden andrenarchy 6.28.0

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.31587c45feaa4
util-linux@2.41.5-0+deb13u1
no fix listed

Open the chart page →

1,530
tt-rssangelnu7.0.01 of 2See more

tt-rss angelnu 7.0.0

1 of the 2 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
ghcr.io/angelnu/tt-rss:2.0.100708ba6617f33c9
util-linux@2.41.3-3ubuntu2.2
no fix listed

Open the chart page →

859
limesurveyarea-42Verified publisher0.3.962 of 2See more

limesurvey area-42 0.3.96

2 of the 2 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
adamzammit/limesurvey:7.1.2b642712ce9a6
util-linux@2.41.5-0+deb13u1
no fix listed
bitnamilegacy/mariadb:12.0.2-debian-12-r0888cdaae3cb9
util-linux@2.38.1-5+deb12u3
no fix listed

Open the chart page →

4,470
athens-proxyathens-chartsOfficialVerified publisher0.17.11 of 1See more

athens-proxy athens-charts 0.17.1

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
gomods/athens:v0.18.197cc113b34b0
util-linux@2.41.4-r0
2.41.6-r1

Open the chart page →

1,307
auto-deploy-appav1o-chartsVerified publisher0.15.41 of 1See more

auto-deploy-app av1o-charts 0.15.4

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
gcr.io/google-containers/echoserver:1.910f4dbc8eeeb
util-linux@1:2.27.1-6ubuntu3.3
no fix listed

Open the chart page →

11,037
bookstackbookstack-mgVerified publisher0.3.11 of 2See more

bookstack bookstack-mg 0.3.1

1 of the 2 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
linuxserver/bookstack:26.05.202605282ebf97852661
util-linux@2.41.4-r0
2.41.6-r1

Open the chart page →

1,893
backup-zenbzen0.1.41 of 1See more

backup-zen bzen 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
rezachalak/bzen-mongo:1.0.034f694325191
util-linux@2.34-0.1ubuntu9.4
no fix listed

Open the chart page →

69,141
geoservercloudcamptocamp23.0.17 of 7See more

geoservercloud camptocamp2 3.0.1

7 of the 7 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:3.0.1.1de0b20bd2a43
util-linux@2.41.3-3ubuntu2
no fix listed
geoservercloud/geoserver-cloud-gwc:3.0.1.1b04ed89b5d2b
util-linux@2.41.3-3ubuntu2
no fix listed
geoservercloud/geoserver-cloud-rest:3.0.1.1318254b52f96
util-linux@2.41.3-3ubuntu2
no fix listed
geoservercloud/geoserver-cloud-wcs:3.0.1.14f077124f591
util-linux@2.41.3-3ubuntu2
no fix listed
geoservercloud/geoserver-cloud-webui:3.0.1.14f91e3048ac8
util-linux@2.41.3-3ubuntu2
no fix listed
geoservercloud/geoserver-cloud-wfs:3.0.1.1299f0d6232d1
util-linux@2.41.3-3ubuntu2
no fix listed
geoservercloud/geoserver-cloud-wms:3.0.1.15164f687ce4d
util-linux@2.41.3-3ubuntu2
no fix listed

Open the chart page →

11,457
thingsboardcetic0.1.21 of 2See more

thingsboard cetic 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
thingsboard/tb-postgres:latest2d17e4e36edc
util-linux@2.38.1-5+deb12u3
no fix listed

Open the chart page →

5,289
collabora-codechrisingenhaag2.6.01 of 1See more

collabora-code chrisingenhaag 2.6.0

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
collabora/code:23.05.10.1.105299b452f7f
util-linux@2.38.1-5+b1
no fix listed

Open the chart page →

4,154
dns-exporterchristianhuthVerified publisher2.6.11 of 1See more

dns-exporter christianhuth 2.6.1

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
tykling/dns_exporter:1.2.3cd6d650c01c1
util-linux@2.41.4-r0
2.41.6-r1

Open the chart page →

477
lighthousechronicleVerified publisher0.0.81 of 1See more

lighthouse chronicle 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
sigp/lighthouse:v7.1.0870934e38931
util-linux@2.37.2-4ubuntu3.4
no fix listed

Open the chart page →

1,983
ghostcloudpirates-ghostVerified publisher0.20.253 of 3See more

ghost cloudpirates-ghost 0.20.25

3 of the 3 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
library/ghost:6.64.0a31d03f1f629
util-linux@2.38.1-5+deb12u3
no fix listed
library/mariadb:12.0.25b6a1eac15b8
util-linux@2.39.3-9ubuntu6.3
no fix listed
library/mariadb:13.0.2d4fdec0510ad
util-linux@2.41.3-3ubuntu2.2
no fix listed

Open the chart page →

7,020
clowardenclowarden0.2.31 of 4See more

clowarden clowarden 0.2.3

1 of the 4 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
artifacthub/postgres:latest4fd34fa635cc
util-linux@2.41-5
no fix listed

Open the chart page →

5,607

Container images carrying it

2,748 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

No deployed image carries CVE-2026-78408.

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.