Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,943Advisories collected
6,375Published or updated in 30 days
7,004Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,943 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-50138
MediumCVSS 5.5

bpf: Use raw_spinlock_t in ringbuf

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.85.1-1 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.85.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50138
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47141
MediumCVSS 5.5

pinmux: Use sequential access to access desc->pinmux data

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-47141
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-57970
MediumCVSS 4.0

libarchive through 3.7.7 has a heap-based buffer over-read in header_gnu_longlink in archive_read_support_format_tar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 cmake 3.21.4-18 on CBL Mariner 2.0, cbl2 cmake 3.21.4-18 on CBL-Mariner 2.0, cbl2 libarchive 3.6.1-6 on CBL-Mariner 2.0, cbl2 libarchive 3.6.1-6 on CBL Mariner 2.0
CVE-2024-57970
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56567
MediumCVSS 5.5

ad7780: fix division by zero in ad7780_write_raw()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56567
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53095
HighCVSS 7.8

smb: client: Fix use-after-free of network namespace.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0
CVE-2024-53095
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50047
HighCVSS 7.8

smb: client: fix UAF in async decryption

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.57.1-1 on Azure Linux 3.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0
Fixed versions6.6.57.1-1, 5.15.182.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50047
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50279
HighCVSS 7.1

dm cache: fix out-of-bounds access to the dirty bitset when resizing

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50279
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-2961
HighCVSS 7.3

The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 glibc 2.38-10 on Azure Linux 3.0, cbl2 glibc 2.35-7 on CBL Mariner 2.0, cbl2 glibc 2.35-7 on CBL-Mariner 2.0
CVE-2024-2961
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49896
Medium

drm/amd/display: Check stream before comparing them

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-49896
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-3205
Severity not listed

Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The maintainer identified an error in the libyaml fuzzers. It is not possible to reproduce nor exploit the issue.

Mariner

Affected productsazl3 libyaml 0.2.5-3 on Azure Linux 3.0, cbl2 libyaml 0.2.5-3, cbl2 libyaml 0.2.5-3 on CBL-Mariner 2.0
CVE-2024-3205
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-25431
HighCVSS 8.8

An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a remote attacker to escalate privileges via a crafted file to the check_was_abi_compatibility function.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 fluent-bit 2.2.3-5 on CBL Mariner 2.0, azl3 fluent-bit 3.1.9-1 on Azure Linux 3.0, azl3 fluent-bit 3.1.9-4 on Azure Linux 3.0, cbl2 fluent-bit 3.0.6-2 on CBL Mariner 2.0
Fixed versions2.2.3-5, 3.1.9-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-25431
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-39489
MediumCVSS 5.5

ipv6: sr: fix memleak in seg6_hmac_init_algo

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.162.2-1 on CBL Mariner 2.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0, azl3 kernel 6.6.22.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.160.1-1 on CBL Mariner 2.0
Fixed versions5.15.162.2-1, -, 6.6.35.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-39489
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49123
MediumCVSS 5.5

ath11k: Fix frames flush failure caused by deadlock

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2022-49123
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-34250
HighCVSS 6.2

A heap buffer overflow vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which allows a remote attacker to cause at least a denial of service via the "wasm_loader_check_br" function in core/iwasm/interpreter/wasm_loader.c.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 fluent-bit 2.2.3-1 on CBL Mariner 2.0, azl3 fluent-bit 3.0.6-1 on Azure Linux 3.0, azl3 fluent-bit 3.1.9-4 on Azure Linux 3.0, cbl2 fluent-bit 3.0.6-2 on CBL Mariner 2.0
Fixed versions2.2.3-1, 3.0.6-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-34250
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53150
HighCVSS 7.8

ALSA: usb-audio: Fix out of bounds reads when finding clock sources

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53150
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21727
MediumCVSS 5.5

padata: fix UAF in padata_reorder

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0
Fixed versions5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21727
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-3447
MediumCVSS 6.0

Qemu: sdhci: heap buffer overflow in sdhci_write_dataport()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 qemu 6.2.0-24 on CBL Mariner 2.0, azl3 qemu 8.2.0-14 on Azure Linux 3.0, cbl2 qemu 6.2.0-24 on CBL-Mariner 2.0, azl3 qemu 8.2.0-16 on Azure Linux 3.0
Fixed versions6.2.0-24, 8.2.0-14
Vendor guidance

CBL-Mariner Releases

CVE-2024-3447
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-48881
Medium

bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-48881
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-48703
MediumCVSS 5.5

thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2022-48703
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53128
MediumCVSS 5.5

sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.76.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.76.1-1, 5.15.182.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53128
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47735
Medium

RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47735
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-2410
HighCVSS 7.6

Use after free in C++ protobuf

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-2 on CBL Mariner 2.0, azl3 mysql 8.0.40-2 on Azure Linux 3.0, cbl2 mysql 8.0.41-1 on CBL-Mariner 2.0, cbl2 mysql 8.0.41-1 on CBL Mariner 2.0
Fixed versions8.0.40-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-2410
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50275
HighCVSS 7.0

arm64/sve: Discard stale CPU state when handling SVE traps

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50275
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-23359
HighCVSS 8.3

NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default configuration, where a crafted container image could gain access to the host file system. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 nvidia-container-toolkit 1.17.3-1 on CBL Mariner 2.0, cbl2 nvidia-container-toolkit 1.17.3-1 on CBL-Mariner 2.0, cbl2 nvidia-container-toolkit 1.17.4-1 on CBL Mariner 2.0, azl3 nvidia-container-toolkit 1.17.4-1 on Azure Linux 3.0
Fixed versions1.17.4-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-23359
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources