Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
18,531Advisories collected
6,564Published or updated in 30 days
8,312Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

18,531 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-1543
MediumCVSS 4.1

AES T-Table sub-cache-line leakage

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 mariadb 10.11.6-3 on Azure Linux 3.0, cbl2 mariadb 10.6.9-6, cbl2 mariadb 10.6.9-6 on CBL-Mariner 2.0
CVE-2024-1543
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53128
MediumCVSS 5.5

sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.76.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.76.1-1, 5.15.182.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53128
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47735
Medium

RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47735
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-2410
HighCVSS 7.6

Use after free in C++ protobuf

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-2 on CBL Mariner 2.0, azl3 mysql 8.0.40-2 on Azure Linux 3.0, cbl2 mysql 8.0.41-1 on CBL-Mariner 2.0, cbl2 mysql 8.0.41-1 on CBL Mariner 2.0
Fixed versions8.0.40-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-2410
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50275
HighCVSS 7.0

arm64/sve: Discard stale CPU state when handling SVE traps

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50275
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-23359
HighCVSS 8.3

NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default configuration, where a crafted container image could gain access to the host file system. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 nvidia-container-toolkit 1.17.3-1 on CBL Mariner 2.0, cbl2 nvidia-container-toolkit 1.17.3-1 on CBL-Mariner 2.0, cbl2 nvidia-container-toolkit 1.17.4-1 on CBL Mariner 2.0, azl3 nvidia-container-toolkit 1.17.4-1 on Azure Linux 3.0
Fixed versions1.17.4-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-23359
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21814
MediumCVSS 5.5

ptp: Ensure info->enable callback is always set

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0
Fixed versions6.6.78.1-3, 5.15.179.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21814
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21731
MediumCVSS 7.8

nbd: don't allow reconnect after disconnect

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0
Fixed versions5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21731
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50135
Medium

nvme-pci: fix race condition between reset and nvme_dev_disable()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50135
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50236
Medium

wifi: ath10k: Fix memory leak in management tx

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50236
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-34251
HighCVSS 7.5

An out-of-bound memory read vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which allows a remote attacker to cause a denial of service via the "block_type_get_arity" function in core/iwasm/interpreter/wasm.h.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 fluent-bit 3.1.9-4 on Azure Linux 3.0, cbl2 fluent-bit 3.0.6-2 on CBL-Mariner 2.0, cbl2 fluent-bit 3.0.6-2
CVE-2024-34251
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42076
MediumCVSS 5.5

net: can: j1939: Initialize unused data in j1939_send_one()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.162.2-1 on CBL Mariner 2.0, azl3 kernel 6.6.43.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.160.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.160.1-1 on CBL-Mariner 2.0
Fixed versions5.15.162.2-1, 6.6.43.1-7
Vendor guidance

CBL-Mariner Releases

CVE-2024-42076
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-43374
MediumCVSS 4.5

Vim heap-use-after-free in src/arglist.c:207

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 vim 9.0.2121-3 on CBL Mariner 2.0, azl3 vim 9.0.2190-5 on Azure Linux 3.0, azl3 vim 9.0.2190-6 on Azure Linux 3.0, cbl2 vim 9.0.2121-5 on CBL Mariner 2.0
Fixed versions9.0.2121-3, 9.0.2190-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-43374
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-2881
HighCVSS 6.7

Fault Injection of EdDSA signature in WolfCrypt

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 mariadb 10.11.6-3 on Azure Linux 3.0, cbl2 mariadb 10.6.9-6, cbl2 mariadb 10.6.9-6 on CBL-Mariner 2.0
CVE-2024-2881
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-54458
HighCVSS 7.8

scsi: ufs: bsg: Set bsg_queue to NULL after removal

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.78.1-3 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0
Fixed versions6.6.82.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-54458
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21861
MediumCVSS 5.5

mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.92.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2025-21861
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47720
Medium

drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47720
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21649
MediumCVSS 5.5

net: hns3: fix kernel crash when 1588 is sent on HIP08 devices

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.104.2-4 on Azure Linux 3.0
CVE-2025-21649
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53151
MediumCVSS 5.5

svcrdma: Address an integer overflow

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53151
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56572
MediumCVSS 3.3

media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56572
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50296
Medium

net: hns3: fix kernel crash when uninstalling driver

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50296
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53108
HighCVSS 7.1

drm/amd/display: Adjust VSDB parser for replay feature

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53108
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-0134
MediumCVSS 4.1

NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 nvidia-container-toolkit 1.17.1-1 on CBL Mariner 2.0, azl3 nvidia-container-toolkit 1.17.1-1 on Azure Linux 3.0, azl3 nvidia-container-toolkit 1.16.2-1 on Azure Linux 3.0, cbl2 nvidia-container-toolkit 1.16.2-1 on CBL-Mariner 2.0
Fixed versions1.17.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-0134
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21820
MediumCVSS 5.5

tty: xilinx_uartps: split sysrq handling

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0
Fixed versions6.6.78.1-3, 5.15.179.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21820
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources