StackRadar

CVE-2026-78410

High

Advisory

Published 2 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.001
1st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,570
of 17,813 indexed, latest versions
Container images
2,535
deployed by those charts
Fix available
2 of 3
affected packages

CVE-2026-78410 affecting package util-linux 2.40.2-5

Carried by container images the latest versions of 2,570 of 17,813 indexed charts deploy, on 2,535 images.

Affected packageAffected versionsFixed inImages
util-linuxdeb1:2.27.1-6ubuntu3.3, 1:2.38.1-5+deb12u1, 1:2.41.5-0+deb13u1+dhi3, 1:4.16.0-2+really2.41-5+47 more2.41.5-0+deb13u1+e22,438
util-linuxapk2.42-r0, 2.42.1-r02.42.3-r096
util-linuxrpm2.40.2-4.azl3no fix listed1
OSV records
ALPINE-CVE-2026-78410DEBIAN-CVE-2026-78410UBUNTU-CVE-2026-78410AZL-99390ECHO-5339-ad7c-f545

Charts affected

2,570 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,535 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/gera-corp-org/statedash:1.8.2c4744059419a
util-linux@2.42.1-r0
2.42.3-r0
1
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
util-linux@2.38.1-5+deb12u3
no fix listed
1
ghcr.io/getsentry/snuba:26.7.210f8d164109b
util-linux@2.41-5
no fix listed
1
ghcr.io/getsentry/taskbroker:26.7.264d0da74a578
util-linux@2.38.1-5+deb12u3
no fix listed
1
ghcr.io/gla-rad/mc-mms-edgerouter:latest3620d5680775
util-linux@2.41-5
no fix listed
1
ghcr.io/gla-rad/mc-mms-router:latest032e977d9adf
util-linux@2.41-5
no fix listed
1
ghcr.io/glassflow/glassflow-notifier:v1.0.3d1b0ce10b513
util-linux@2.41-5
no fix listed
1
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
util-linux@2.41-5
no fix listed
1
ghcr.io/goauthentik/server:2026.8.3ab9b4e8cc4ab
util-linux@2.41.5-0+deb13u1
no fix listed
1
ghcr.io/goauthentik/server:2026.5.6ed120caf710c
util-linux@2.41-5
no fix listed
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
util-linux@2.38.1-5+deb12u1
no fix listed
1
ghcr.io/gregperlinli/certvault:2.12.0a7d0cc9e260a
util-linux@2.39.3-9ubuntu6.4
no fix listed
1
ghcr.io/grycap/im:latest06a16d4f279f
util-linux@2.39.3-9ubuntu6.3
no fix listed
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
util-linux@2.34-0.1ubuntu9.3
no fix listed
1
ghcr.io/hemslo/chat-search:latest39d48995a5bd
util-linux@2.38.1-5+deb12u1
no fix listed
1
ghcr.io/home-assistant/home-assistant:2026.9.0372d991e5888
util-linux@2.42.1-r0
2.42.3-r0
1
ghcr.io/home-assistant/home-assistant:2026.8.256690a89c79a
util-linux@2.42.1-r0
2.42.3-r0
1
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
util-linux@2.42.1-r0
2.42.3-r0
1
ghcr.io/home-operations/bazarr:1.5.680cb090162b4
util-linux@2.42.1-r0
2.42.3-r0
1
ghcr.io/home-operations/bazarr:1.6.1e5d192a6f62a
util-linux@2.42.1-r0
2.42.3-r0
1
ghcr.io/home-operations/plex:1.43.1a9c3723cb31c
util-linux@2.39.3-9ubuntu6.5
no fix listed
1
ghcr.io/home-operations/qbittorrent:5.2.224f2d793cb7f
util-linux@2.42-r0
2.42.3-r0
1
ghcr.io/home-operations/qbittorrent:5.2.34fcf15b7f265
util-linux@2.42-r0
2.42.3-r0
1
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
util-linux@2.41-5
no fix listed
1
ghcr.io/huggingface/text-embeddings-inference:cpu-1.666db77d7856c
util-linux@2.38.1-5+deb12u3
no fix listed
1
ghcr.io/huggingface/text-embeddings-inference:cpu-1.9.3ad950d30878e
util-linux@2.38.1-5+deb12u3
no fix listed
1
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
util-linux@2.38.1-5+deb12u3
no fix listed
1
ghcr.io/hypolia/kanri:0.1.2-rc4fa7d5cc7fb7d
util-linux@2.38.1-5+deb12u2
no fix listed
1
ghcr.io/icegatetech/icegate-ingest:0.1.1bae3c441894a
util-linux@2.38.1-5+deb12u3
no fix listed
1
ghcr.io/icegatetech/icegate-maintain:0.1.193e85b2b76ee
util-linux@2.38.1-5+deb12u3
no fix listed
1
ghcr.io/icegatetech/icegate-query:0.1.17542b4e7fff2
util-linux@2.38.1-5+deb12u3
no fix listed
1
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
util-linux@2.38.1-5+deb12u3
no fix listed
1
ghcr.io/iisas/domino-frontend:k8s8e53861be292
util-linux@2.38.1-5+deb12u3
no fix listed
1
ghcr.io/iisas/domino-rest:latest3009350bfc11
util-linux@2.41-5
no fix listed
1
ghcr.io/imgproxy/imgproxy:v3.30.074c1bee92e04
util-linux@2.39.3-9ubuntu6.3
no fix listed
1
ghcr.io/immich-app/immich-machine-learning:v2.3.1379e31b8c751
util-linux@2.38.1-5+deb12u3
no fix listed
1
ghcr.io/immich-app/immich-machine-learning:v3.1.05a0839dc5303
util-linux@2.38.1-5+deb12u3
no fix listed
1
ghcr.io/immich-app/immich-server:v3.2.279cc1623323d
util-linux@2.41-5
no fix listed
1
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
util-linux@2.41-5
no fix listed
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
util-linux@2.41-5
no fix listed
1
ghcr.io/interlink-hq/interlink/virtual-kubelet-inttw:latest0e05a7b49c33
util-linux@2.37.2-4ubuntu3.5
no fix listed
1
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
util-linux@2.38.1-5+deb12u3
no fix listed
1
ghcr.io/it-at-m/appswitcher-server:1.3.010006bc0f309
util-linux@2.37.2-4ubuntu3.4
no fix listed
1
ghcr.io/itobey/playlist-mirror:1.0.0601082677a46
util-linux@2.41-5
no fix listed
1
ghcr.io/itzg/minecraft-server:latest46919d151d39
util-linux@2.39.3-9ubuntu6.6
no fix listed
1
ghcr.io/jaydee94/kubeseal-webgui/api:4.5.33cceb9462ae1
util-linux@2.38.1-5+deb12u3
no fix listed
1
ghcr.io/jellyfin/jellyfin:10.11.1145f648c382a0
util-linux@2.41-5
no fix listed
1
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
util-linux@2.39.3-9ubuntu6.1
no fix listed
1
ghcr.io/jfwenisch/discord-experiencebot:latestb52ff07f9f0c
util-linux@2.31.1-0.4ubuntu3.7
no fix listed
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
util-linux@2.39.3-9ubuntu6.1
no fix listed
1

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.