Vendor advisories

Microsoft Security Response Center

Browse 15,985 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 3 hours ago Checked every 6 hours

15,985 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-49988
MediumCVSS 8.8

ksmbd: add refcnt to ksmbd_conn struct

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.57.1-2 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-58071
MediumCVSS 5.5

team: prevent adding a device which is already a team device lower

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0
Fixed versions5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-0938
Medium

URL parser allowed square brackets in domain names

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 python3 3.9.19-13 on CBL-Mariner 2.0, cbl2 python3 3.9.19-10 on CBL Mariner 2.0, azl3 python3 3.12.9-1 on Azure Linux 3.0, azl3 python3 3.12.3-5 on Azure Linux 3.0
Fixed versions3.9.19-10, 3.12.9-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-50179
Medium

ceph: remove the incorrect Fw reference check when dirtying pages

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-42934
MediumCVSS 5.0

OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator resulting in denial of service or (with very low probability) authentication bypass or code execution.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 OpenIPMI 2.0.36-1 on CBL Mariner 2.0, azl3 OpenIPMI 2.0.36-1 on Azure Linux 3.0, azl3 OpenIPMI 2.0.33-1 on Azure Linux 3.0, cbl2 OpenIPMI 2.0.32-1 on CBL Mariner 2.0
Fixed versions2.0.36-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-50061
HighCVSS 7.0

i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.57.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0
Fixed versions6.6.57.1-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-4287
LowCVSS 3.3

PyTorch nccl.py torch.cuda.nccl.reduce denial of service

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 pytorch 2.2.2-7 on Azure Linux 3.0, cbl2 pytorch 2.0.0-9 on CBL-Mariner 2.0, cbl2 pytorch 2.0.0-9 on CBL Mariner 2.0
Microsoft Security Response CenterCVE-2024-50111
MediumCVSS 5.5

LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-58017
MediumCVSS 5.5

printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.78.1-3 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0
Fixed versions5.15.179.1-1, 6.6.78.1-3
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-53179
HighCVSS 7.8

smb: client: fix use-after-free of signing key

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-27002
MediumCVSS 5.5

clk: mediatek: Do a runtime PM get on controllers during probe

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 hyperv-daemons 6.6.35.1-1 on Azure Linux 3.0, azl3 hyperv-daemons 6.6.22.1-2 on Azure Linux 3.0
Fixed versions6.6.35.1-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-58069
HighCVSS 7.8

rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0
Fixed versions5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2023-52921
HighCVSS 7.8

drm/amdgpu: fix possible UAF in amdgpu_cs_pass1()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0
Microsoft Security Response CenterCVE-2024-56171
HighCVSS 7.8

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 libxml2 2.11.5-4 on Azure Linux 3.0, cbl2 libxml2 2.10.4-6 on CBL Mariner 2.0, azl3 libxml2 2.11.5-5 on Azure Linux 3.0, cbl2 libxml2 2.10.4-6 on CBL-Mariner 2.0
Fixed versions2.11.5-4, 2.10.4-6
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-21943
MediumCVSS 4.7

gpio: aggregator: protect driver attr handlers against module unload

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, azl3 kernel 6.6.82.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0
Fixed versions5.15.180.1-1, 6.6.85.1-2
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-47718
HighCVSS 7.8

wifi: rtw88: always wait for both firmware loading attempts

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-24795
MediumCVSS 6.3

Apache HTTP Server: HTTP Response Splitting in multiple modules

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 httpd 2.4.59-1 on CBL Mariner 2.0, azl3 httpd 2.4.61-1 on Azure Linux 3.0, cbl2 httpd 2.4.58-1 on CBL-Mariner 2.0, azl3 httpd 2.4.58-4 on Azure Linux 3.0
Fixed versions2.4.59-1, 2.4.61-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-21964
MediumCVSS 5.5

cifs: Fix integer overflow while processing acregmax mount option

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.82.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0
Fixed versions6.6.85.1-2, 5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-56747
MediumCVSS 3.3

scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-49987
MediumCVSS 5.5

bpftool: Fix undefined behavior in qsort(NULL 0 ...)

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.57.1-2 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-48957
HighCVSS 7.8

execute_filter_audio in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 libarchive 3.6.1-4 on CBL Mariner 2.0, azl3 libarchive 3.7.7-1 on Azure Linux 3.0, cbl2 libarchive 3.6.1-6 on CBL-Mariner 2.0, azl3 libarchive 3.7.1-2 on Azure Linux 3.0
Fixed versions3.6.1-4, 3.7.7-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-38571
MediumCVSS 5.5

thermal/drivers/tsens: Fix null pointer dereference

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.162.2-1 on CBL Mariner 2.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.160.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.22.1-2 on Azure Linux 3.0
Fixed versions5.15.162.2-1, -, 6.6.35.1-5
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-50127
HighCVSS 7.8

net: sched: fix use-after-free in taprio_change()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-35937
HighCVSS 7.1

wifi: cfg80211: check A-MSDU format more carefully

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources