Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
18,531Advisories collected
6,565Published or updated in 30 days
8,312Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

18,531 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2025-1390
MediumCVSS 6.1

pam_cap: Fix potential configuration parsing error

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 libcap 2.60-4 on CBL Mariner 2.0, azl3 libcap 2.69-4 on Azure Linux 3.0, cbl2 libcap 2.60-4 on CBL-Mariner 2.0, cbl2 libcap 2.60-3 on CBL Mariner 2.0
Fixed versions2.60-3, 2.69-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-1390
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-44944
MediumCVSS 5.5

netfilter: ctnetlink: use helper function to calculate expect ID

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL-Mariner 2.0
Fixed versions5.15.167.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-44944
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-29481
MediumCVSS 6.2

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpf_object__init_prog` function of libbpf.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 libbpf 1.0.1-2 on CBL Mariner 2.0, cbl2 libbpf 1.0.1-2 on CBL-Mariner 2.0, azl3 bcc 0.29.1-3 on Azure Linux 3.0, azl3 dwarves 1.25-2 on Azure Linux 3.0
Fixed versions1.0.1-2, 0.29.1-3, 1.25-2, 1.2.2-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-29481
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50181
Medium

clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50181
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-58055
HighCVSS 7.8

usb: gadget: f_tcm: Don't free command immediately

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0
Fixed versions5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-58055
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56739
MediumCVSS 5.5

rtc: check if __rtc_read_time was successful in rtc_timer_do_work()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56739
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50112
MediumCVSS 5.6

x86/lam: Disable ADDRESS_MASKING in most cases

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0
Fixed versions6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50112
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50202
MediumCVSS 5.5

nilfs2: propagate directory read errors from nilfs_find_entry()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50202
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-24855
HighCVSS 7.8

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 libxslt 1.1.34-8 on CBL Mariner 2.0, azl3 libxslt 1.1.39-1 on Azure Linux 3.0, cbl2 libxslt 1.1.34-8 on CBL-Mariner 2.0, azl3 libxslt 1.1.43-1 on Azure Linux 3.0
Fixed versions1.1.34-8, 1.1.43-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-24855
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47672
Medium

wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.176.3-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47672
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47723
High

jfs: fix out-of-bounds in dbNextAG() and diAlloc()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47723
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-38583
HighCVSS 7.8

nilfs2: fix use-after-free of timer for log writer thread

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.161.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.160.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.160.1-1 on CBL-Mariner 2.0
Fixed versions5.15.161.1-1, -, 5.15.162.2-1, 6.6.35.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-38583
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-43871
MediumCVSS 5.5

devres: Fix memory leakage caused by driver API devm_free_percpu()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL-Mariner 2.0
Fixed versions5.15.167.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-43871
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-41001
MediumCVSS 5.5

io_uring/sqpoll: work around a potential audit memory leak

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.47.1-1 on Azure Linux 3.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0
Fixed versions6.6.47.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-41001
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-48875
MediumCVSS 5.5

btrfs: don't take dev_replace rwsem on task already holding it

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-48875
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-57834
MediumCVSS 5.5

media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.79.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions5.15.179.1-1, 6.6.79.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-57834
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-58076
Medium

clk: qcom: gcc-sm6350: Add missing parent_map for two clocks

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0
Fixed versions5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-58076
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-8929
MediumCVSS 5.8

Leak partial content of the heap through heap buffer over-read in mysqlnd

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 php 8.1.31-1 on CBL Mariner 2.0, azl3 php 8.3.14-1 on Azure Linux 3.0, azl3 php 8.3.12-1 on Azure Linux 3.0, cbl2 php 8.1.30-1 on CBL Mariner 2.0
Fixed versions8.1.31-1, 8.3.14-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-8929
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-26603
MediumCVSS 4.2

heap-use-after-free in function str_to_reg in vim/vim

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 vim 9.1.0791-4 on CBL Mariner 2.0, cbl2 vim 9.1.0791-4 on CBL-Mariner 2.0, azl3 vim 9.1.0791-4 on Azure Linux 3.0
Fixed versions9.1.0791-4
Vendor guidance

CBL-Mariner Releases

CVE-2025-26603
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-6237
MediumCVSS 5.9

Excessive time spent checking invalid RSA public keys

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 openssl 3.1.4-9 on Azure Linux 3.0, azl3 nodejs 20.10.0-2 on Azure Linux 3.0, cbl2 nodejs18 18.18.2-7 on CBL Mariner 2.0, cbl2 cloud-hypervisor-cvm 38.0.72-1 on CBL Mariner 2.0
Fixed versions3.3.0-1, 20.14.0-1, 18.20.2-1, 38.0.72.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-6237
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49991
HighCVSS 7.8

drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0
Fixed versions6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-49991
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50117
Medium

drm/amd: Guard against bad data for ATIF ACPI method

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50117
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-57994
MediumCVSS 5.5

ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.121.1-1 on Azure Linux 3.0
Fixed versions6.6.126.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-57994
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources