Vendor advisories

Microsoft Security Response Center

Browse 15,985 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 4 hours ago Checked every 6 hours

15,985 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-26966
Medium

clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hyperv-daemons 5.15.158.1-1 on CBL Mariner 2.0, azl3 hyperv-daemons 6.6.35.1-1 on Azure Linux 3.0, cbl2 hyperv-daemons 5.15.153.1-1 on CBL Mariner 2.0, azl3 hyperv-daemons 6.6.22.1-2 on Azure Linux 3.0
Fixed versions5.15.158.1-1, 6.6.35.1-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-10976
MediumCVSS 5.4

PostgreSQL row security below e.g. subqueries disregards user ID changes

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 postgresql 14.14-1 on CBL Mariner 2.0, azl3 postgresql 16.5-1 on Azure Linux 3.0, cbl2 postgresql 14.13-1 on CBL Mariner 2.0, cbl2 postgresql 14.13-1 on CBL-Mariner 2.0
Fixed versions14.14-1, 16.5-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-21751
HighCVSS 7.8

net/mlx5: HWS, change error flow on matcher disconnect

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.92.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Microsoft Security Response CenterCVE-2024-52336
HighCVSS 7.8

Tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 tuned 2.21.0-2 on Azure Linux 3.0, cbl2 tuned 2.15.0-5 on CBL Mariner 2.0, cbl2 tuned 2.15.0-5 on CBL-Mariner 2.0
Fixed versions2.21.0-2, 2.15.0-5
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-50103
MediumCVSS 5.5

ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-26465
MediumCVSS 6.8

Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 openssh 9.8p1-4 on Azure Linux 3.0, cbl2 openssh 8.9p1-8 on CBL-Mariner 2.0, cbl2 openssh 8.9p1-7 on CBL Mariner 2.0, azl3 openssh 9.8p1-3 on Azure Linux 3.0
Fixed versions9.8p1-3, 8.9p1-7
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-50055
High

driver core: bus: Fix double free in driver API bus_register()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.57.1-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-27062
MediumCVSS 5.5

nouveau: lock the client object tree.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1
Microsoft Security Response CenterCVE-2024-56728
Medium

octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-3652
MediumCVSS 6.5

IKEv1 default AH/ESP responder can cause libreswan to abort and restart

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 libreswan 4.15-1 on Azure Linux 3.0, azl3 libreswan 4.7-7 on Azure Linux 3.0, cbl2 libreswan 4.14-2 on CBL Mariner 2.0, cbl2 libreswan 4.14-2 on CBL-Mariner 2.0
Fixed versions4.15-1, 4.14-2
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-47706
Medium

block bfq: fix possible UAF for bfqq->bic with merge chain

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-29768
MediumCVSS 4.4

Vim vulnerable to potential data loss with zip.vim and special crafted zip files

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 vim 9.1.0791-4 on CBL-Mariner 2.0, cbl2 vim 9.1.1198-1 on CBL Mariner 2.0, azl3 vim 9.1.1198-1 on Azure Linux 3.0, azl3 vim 9.1.1164-1 on Azure Linux 3.0
Fixed versions9.1.1198-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-53165
HighCVSS 7.8

sh: intc: Fix use-after-free bug in register_intc_controller()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-26977
MediumCVSS 5.5

pci_iounmap(): Fix MMIO mapping leak

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hyperv-daemons 5.15.158.1-1 on CBL Mariner 2.0, azl3 hyperv-daemons 6.6.35.1-1 on Azure Linux 3.0, cbl2 hyperv-daemons 5.15.153.1-1 on CBL Mariner 2.0, azl3 hyperv-daemons 6.6.22.1-2 on Azure Linux 3.0
Fixed versions5.15.158.1-1, 6.6.35.1-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-35945
MediumCVSS 5.5

net: phy: phy_device: Prevent nullptr exceptions on ISR

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
Microsoft Security Response CenterCVE-2025-21761
HighCVSS 7.8

openvswitch: use RCU protection in ovs_vport_cmd_fill_info()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.82.1-1 on Azure Linux 3.0
Fixed versions5.15.180.1-1, 6.6.82.1-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-22004
HighCVSS 7.8

net: atm: fix use after free in lec_send()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.85.1-2 on Azure Linux 3.0
Fixed versions5.15.180.1-1, 6.6.85.1-2
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-10979
HighCVSS 8.8

PostgreSQL PL/Perl environment variable changes execute arbitrary code

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 postgresql 14.14-1 on CBL Mariner 2.0, azl3 postgresql 16.5-1 on Azure Linux 3.0, cbl2 postgresql 14.16-1 on CBL Mariner 2.0, azl3 postgresql 16.4-2 on Azure Linux 3.0
Fixed versions14.14-1, 16.5-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-50269
HighCVSS 7.8

usb: musb: sunxi: Fix accessing an released usb phy

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-58002
HighCVSS 7.8

media: uvcvideo: Remove dangling pointers

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.82.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0
Fixed versions5.15.179.1-1, 6.6.82.1-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-50137
MediumCVSS 5.5

reset: starfive: jh71x0: Fix accessing the empty member on JH7110 SoC

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.90.1-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-38570
HighCVSS 7.8

gfs2: Fix potential glock use-after-free on unmount

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.35.1-5 on Azure Linux 3.0, azl3 kernel 6.6.22.1-2 on Azure Linux 3.0
Fixed versions-, 6.6.35.1-5
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-32487
HighCVSS 8.6

less through 653 allows OS command execution via a newline character in the name of a file because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN environment variable but this is set by default in many common cases.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 less 643-2 on Azure Linux 3.0, cbl2 less 590-4 on CBL Mariner 2.0, cbl2 less 590-4 on CBL-Mariner 2.0
Fixed versions643-2, 590-4
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-49858
Medium

efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources