Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,943Advisories collected
6,375Published or updated in 30 days
7,004Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,943 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2025-21751
HighCVSS 7.8

net/mlx5: HWS, change error flow on matcher disconnect

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.92.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2025-21751
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-52336
HighCVSS 7.8

Tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 tuned 2.21.0-2 on Azure Linux 3.0, cbl2 tuned 2.15.0-5 on CBL Mariner 2.0, cbl2 tuned 2.15.0-5 on CBL-Mariner 2.0
Fixed versions2.21.0-2, 2.15.0-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-52336
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50103
MediumCVSS 5.5

ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50103
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-26465
MediumCVSS 6.8

Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 openssh 9.8p1-4 on Azure Linux 3.0, cbl2 openssh 8.9p1-8 on CBL-Mariner 2.0, cbl2 openssh 8.9p1-7 on CBL Mariner 2.0, azl3 openssh 9.8p1-3 on Azure Linux 3.0
Fixed versions9.8p1-3, 8.9p1-7
Vendor guidance

CBL-Mariner Releases

CVE-2025-26465
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50055
High

driver core: bus: Fix double free in driver API bus_register()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.57.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50055
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-27062
MediumCVSS 5.5

nouveau: lock the client object tree.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1
CVE-2024-27062
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56728
Medium

octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56728
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-3652
MediumCVSS 6.5

IKEv1 default AH/ESP responder can cause libreswan to abort and restart

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 libreswan 4.15-1 on Azure Linux 3.0, azl3 libreswan 4.7-7 on Azure Linux 3.0, cbl2 libreswan 4.14-2 on CBL Mariner 2.0, cbl2 libreswan 4.14-2 on CBL-Mariner 2.0
Fixed versions4.15-1, 4.14-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-3652
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47706
Medium

block bfq: fix possible UAF for bfqq->bic with merge chain

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47706
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-29768
MediumCVSS 4.4

Vim vulnerable to potential data loss with zip.vim and special crafted zip files

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 vim 9.1.0791-4 on CBL-Mariner 2.0, cbl2 vim 9.1.1198-1 on CBL Mariner 2.0, azl3 vim 9.1.1198-1 on Azure Linux 3.0, azl3 vim 9.1.1164-1 on Azure Linux 3.0
Fixed versions9.1.1198-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-29768
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53165
HighCVSS 7.8

sh: intc: Fix use-after-free bug in register_intc_controller()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53165
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26977
MediumCVSS 5.5

pci_iounmap(): Fix MMIO mapping leak

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hyperv-daemons 5.15.158.1-1 on CBL Mariner 2.0, azl3 hyperv-daemons 6.6.35.1-1 on Azure Linux 3.0, cbl2 hyperv-daemons 5.15.153.1-1 on CBL Mariner 2.0, azl3 hyperv-daemons 6.6.22.1-2 on Azure Linux 3.0
Fixed versions5.15.158.1-1, 6.6.35.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-26977
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-35945
MediumCVSS 5.5

net: phy: phy_device: Prevent nullptr exceptions on ISR

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
CVE-2024-35945
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21761
HighCVSS 7.8

openvswitch: use RCU protection in ovs_vport_cmd_fill_info()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.82.1-1 on Azure Linux 3.0
Fixed versions5.15.180.1-1, 6.6.82.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21761
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-22004
HighCVSS 7.8

net: atm: fix use after free in lec_send()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.85.1-2 on Azure Linux 3.0
Fixed versions5.15.180.1-1, 6.6.85.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-22004
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-10979
HighCVSS 8.8

PostgreSQL PL/Perl environment variable changes execute arbitrary code

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 postgresql 14.14-1 on CBL Mariner 2.0, azl3 postgresql 16.5-1 on Azure Linux 3.0, cbl2 postgresql 14.16-1 on CBL Mariner 2.0, azl3 postgresql 16.4-2 on Azure Linux 3.0
Fixed versions14.14-1, 16.5-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-10979
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50269
HighCVSS 7.8

usb: musb: sunxi: Fix accessing an released usb phy

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50269
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-58002
HighCVSS 7.8

media: uvcvideo: Remove dangling pointers

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.82.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0
Fixed versions5.15.179.1-1, 6.6.82.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-58002
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50137
MediumCVSS 5.5

reset: starfive: jh71x0: Fix accessing the empty member on JH7110 SoC

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.90.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50137
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-38570
HighCVSS 7.8

gfs2: Fix potential glock use-after-free on unmount

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.35.1-5 on Azure Linux 3.0, azl3 kernel 6.6.22.1-2 on Azure Linux 3.0
Fixed versions-, 6.6.35.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-38570
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-32487
HighCVSS 8.6

less through 653 allows OS command execution via a newline character in the name of a file because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN environment variable but this is set by default in many common cases.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 less 643-2 on Azure Linux 3.0, cbl2 less 590-4 on CBL Mariner 2.0, cbl2 less 590-4 on CBL-Mariner 2.0
Fixed versions643-2, 590-4
Vendor guidance

CBL-Mariner Releases

CVE-2024-32487
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49858
Medium

efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-49858
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56575
Medium

media: imx-jpeg: Ensure power suppliers be suspended before detach them

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56575
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56622
Medium

scsi: ufs: core: sysfs: Prevent div by zero

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56622
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources