Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,941Advisories collected
6,373Published or updated in 30 days
7,004Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,941 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2025-21996
MediumCVSS 5.5

drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, azl3 kernel 6.6.82.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0
Fixed versions5.15.180.1-1, 6.6.85.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-21996
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50108
MediumCVSS 5.5

drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50108
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47730
HighCVSS 7.8

crypto: hisilicon/qm - inject error before stopping queue

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47730
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50187
HighCVSS 7.8

drm/vc4: Stop the active perfmon before being destroyed

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2024-50187
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49168
HighCVSS 7.8

btrfs: do not clean up repair bio if submit fails

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions5.15.184.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2022-49168
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-38581
HighCVSS 7.8

drm/amdgpu/mes: fix use-after-free issue

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.35.1-5 on Azure Linux 3.0, azl3 kernel 6.6.22.1-2 on Azure Linux 3.0
Fixed versions-, 6.6.35.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-38581
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21748
MediumCVSS 5.5

ksmbd: fix integer overflows on 32 bit systems

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.78.1-3 on Azure Linux 3.0
Fixed versions5.15.179.1-1, 6.6.78.1-3
Vendor guidance

CBL-Mariner Releases

CVE-2025-21748
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26983
HighCVSS 7.8

bootconfig: use memblock_free_late to free xbc memory to buddy

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 hyperv-daemons 6.6.35.1-1 on Azure Linux 3.0, azl3 hyperv-daemons 6.6.22.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
Fixed versions6.6.35.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-26983
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56602
HighCVSS 7.8

net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56602
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-1390
MediumCVSS 6.1

pam_cap: Fix potential configuration parsing error

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 libcap 2.60-4 on CBL Mariner 2.0, azl3 libcap 2.69-4 on Azure Linux 3.0, cbl2 libcap 2.60-4 on CBL-Mariner 2.0, cbl2 libcap 2.60-3 on CBL Mariner 2.0
Fixed versions2.60-3, 2.69-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-1390
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-29481
MediumCVSS 6.2

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpf_object__init_prog` function of libbpf.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 libbpf 1.0.1-2 on CBL Mariner 2.0, cbl2 libbpf 1.0.1-2 on CBL-Mariner 2.0, azl3 bcc 0.29.1-3 on Azure Linux 3.0, azl3 dwarves 1.25-2 on Azure Linux 3.0
Fixed versions1.0.1-2, 0.29.1-3, 1.25-2, 1.2.2-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-29481
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50181
Medium

clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50181
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-58055
HighCVSS 7.8

usb: gadget: f_tcm: Don't free command immediately

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0
Fixed versions5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-58055
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56739
MediumCVSS 5.5

rtc: check if __rtc_read_time was successful in rtc_timer_do_work()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56739
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50112
MediumCVSS 5.6

x86/lam: Disable ADDRESS_MASKING in most cases

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0
Fixed versions6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50112
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50202
MediumCVSS 5.5

nilfs2: propagate directory read errors from nilfs_find_entry()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50202
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-24855
HighCVSS 7.8

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 libxslt 1.1.34-8 on CBL Mariner 2.0, azl3 libxslt 1.1.39-1 on Azure Linux 3.0, cbl2 libxslt 1.1.34-8 on CBL-Mariner 2.0, azl3 libxslt 1.1.43-1 on Azure Linux 3.0
Fixed versions1.1.34-8, 1.1.43-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-24855
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47672
Medium

wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.176.3-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47672
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47723
High

jfs: fix out-of-bounds in dbNextAG() and diAlloc()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47723
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-38583
HighCVSS 7.8

nilfs2: fix use-after-free of timer for log writer thread

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.161.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.160.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.160.1-1 on CBL-Mariner 2.0
Fixed versions5.15.161.1-1, -, 5.15.162.2-1, 6.6.35.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-38583
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-41001
MediumCVSS 5.5

io_uring/sqpoll: work around a potential audit memory leak

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.47.1-1 on Azure Linux 3.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0
Fixed versions6.6.47.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-41001
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-48875
MediumCVSS 5.5

btrfs: don't take dev_replace rwsem on task already holding it

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-48875
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-57834
MediumCVSS 5.5

media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.79.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions5.15.179.1-1, 6.6.79.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-57834
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources