CVE-2026-89580

High

Advisory

Published 11 Sept 2026In the index since 18 Sept 2026

The matching OSV records carry no description.

Carried by container images the latest versions of 101 of 17,813 indexed charts deploy, on 112 images.

Affected package	Affected versions	Fixed in	Images
linuxdeb	5.4.0-62.70, 5.4.0-65.73, 5.4.0-67.75, 5.4.0-74.83+61 more	no fix listed	112

101 by stars

Chart

Latest

Affected images

Radar Score

kongwallarm

1 of the 7 container images this version deploys carry CVE-2026-89580.

Container image	Digest	Package	Fixed in
wallarm/kong :3.1.0-ubuntu-4.6.0	ea9608c82e40	linux@5.4.0-144.161	no fix listed

74,867

112 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/openrelik/openrelik-worker-floss :latest	7a331eb83c6a	linux@6.8.0-136.136	no fix listed	1
ghcr.io/openrelik/openrelik-worker-os-creds :latest	7fc7ec101f08	linux@6.8.0-136.136	no fix listed	1
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	linux@5.4.0-121.137	no fix listed	1
ghcr.io/smarter-project/audio-client :v3.1.2	3c8375dc5487	linux@5.4.0-131.147	no fix listed	1
ghcr.io/smarter-project/gstreamer :v1.0.2	5ecb16015aa8	linux@5.4.0-131.147	no fix listed	1
ghcr.io/smarter-project/image-detector :v2.5.3	1dcca70c6446	linux@5.4.0-131.147	no fix listed	1
ghcr.io/streamingfast/substreams-sink-kv :v2.3.0	26953ec68d5d	linux@5.4.0-200.220	no fix listed	1
ghcr.io/streamingfast/substreams-sink-noop :v1.4.0	d7c43c3135c6	linux@5.4.0-200.220	no fix listed	1
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer :1.74.4_local	1ed844ecab29	linux@6.8.0-139.139	no fix listed	1
public.ecr.aws/spotinst/spot-network-client :1.0.14	86380a01587d	linux@6.8.0-100.100	no fix listed	1
registry.gitlab.com/crafty-controller/crafty-4 :latest	7b6e87514259	linux@6.8.0-139.139	no fix listed	1
registry.gitlab.com/infinitydon/registry/open5gs-aio :v2.2.2	f6385712935f	linux@5.4.0-67.75	no fix listed	1