attestation model

  1. Azure Linux and CVE-2025-38122: Attestations, Patching, and Artifact Risk

    No — Azure Linux is the only Microsoft product Microsoft has publicly attested to include the specific open‑source component tied to CVE‑2025‑38122, but that attestation is product‑scoped and does not prove that other Microsoft artifacts cannot also include the same vulnerable upstream Linux...