CVE-2026-98606

High

Advisory

Published 19 Oct 2026In the index since 20 Oct 2026

Severity: High; worst across findings
CVSS: 7.3; base score, highest
EPSS: 0.002; 10th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 55; of 18,208 indexed, latest versions
Container images: 54; deployed by those charts
Fix available: None; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 55 of 18,208 indexed charts deploy, on 54 images.

Affected package	Affected versions	Fixed in	Images
linuxdeb	5.15.0-25.25, 5.15.0-46.49, 5.15.0-52.58, 5.15.0-53.59+32 more	no fix listed	54

OSV records: UBUNTU-CVE-2026-98606

Charts affected

55 by stars

Chart

Latest

Affected images

Radar Score

ocean-network-clientspot

1.1.6

1 of 1 See more

ocean-network-client spot 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-98606.

Container image	Digest	Package	Fixed in
public.ecr.aws/spotinst/spot-network-client :1.0.14	86380a01587d	linux@6.8.0-100.100	no fix listed

Open the chart page →

57,370

maxscalesvtech-public-helm-charts

1.0.0

1 of 2 See more

maxscale svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-98606.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_maxscale :v1.0.3	410a25b51f9f	linux@5.15.0-92.102	no fix listed

Open the chart page →

78,260

tensor_apptensor-app

0.2.2

1 of 3 See more

tensor_app tensor-app 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-98606.

Container image	Digest	Package	Fixed in
xeladock/mysql_dns :latest	4baf531453f1	linux@5.15.0-25.25	no fix listed

Open the chart page →

112,920

unmanicvhdirk

0.1.4

1 of 1 See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-98606.

Container image	Digest	Package	Fixed in
josh5/unmanic :0.2.6	4d49c4816260	linux@5.15.0-100.110	no fix listed

Open the chart page →

79,160

twenty-crmvictorlane

0.0.1

1 of 3 See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-98606.

Container image	Digest	Package	Fixed in
twentycrm/twenty-postgres-spilo :latest	2f78405a78be	linux@5.15.0-134.145	no fix listed

Open the chart page →

72,914

Container images carrying it

54 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

No deployed image carries CVE-2026-98606.