attestation rollout

Microsoft’s brief product attestation for CVE-2025-38064 names Azure Linux as a known carrier of the vulnerable virtio code path, but that attestation is a scoped inventory statement — not a categorical guarantee that no other Microsoft product can or does include the same open‑source component...