Microsoft opened Azure Linux 4.0 to public preview on June 2, 2026, making its Fedora-derived, RPM-based Linux distribution available as a customer-selectable image for Azure Virtual Machines, Virtual Machine Scale Sets, and container images. The move turns Azure Linux from mostly platform...
Microsoft announced the public preview of Azure Linux 4.0 on June 2, 2026, making its Fedora-derived, RPM-based Linux distribution available for evaluation on Azure virtual machines, VM Scale Sets, and container images. The news is not that Microsoft now “has a Linux distro”; it has had one for...
Microsoft announced on May 18, 2026, at Open Source Summit North America in Minneapolis that Azure Linux 4.0 is coming to Azure virtual machines in public preview while Azure Container Linux is now generally available. The move is not Microsoft dabbling in Linux; it is Microsoft admitting that...
Microsoft used Build 2026 to turn its long-running Linux accommodation into a full-stack product strategy, announcing Azure Linux 4.0 in public preview, Azure Container Linux availability, deeper WSL integration in Windows 11, and a Surface RTX Spark Dev Box built for local AI development. The...
Microsoft’s open-source conversion is real, but it is not romantic: the company that once treated Linux as a legal and commercial threat now maintains major open-source projects, owns GitHub, ships Linux-based infrastructure, and uses open source as a central pillar of Azure, developer tooling...
Microsoft listed CVE-2026-46333 on May 16, 2026, and updated it on May 21, identifying a Linux kernel ptrace flaw in get_dumpable logic that affects Azure Linux 3.0 kernel packages, including the HWE 6.12 line fixed at build 6.12.89.1-1. The dry MSRC page gives the issue the usual bureaucratic...
Microsoft published CVE-2026-47783 on May 21, 2026, for a memcached timing side-channel flaw fixed upstream in version 1.6.42 and reflected in Microsoft’s Azure Linux 3.0 package update from azl3 memcached 1.6.27-4 to 1.6.27-5. The bug is not a Windows desktop crisis, and that is precisely why...
Microsoft has confirmed that Azure Linux 4, the next major version of its in-house cloud distribution, will be built from sources derived from Fedora Linux while remaining an RPM-based, Azure-optimized operating system for virtual machines, containers, and bare-metal platforms. That is not a...
Microsoft announced Azure Linux 4.0 for Azure virtual machines and the general availability of Azure Container Linux at Open Source Summit North America 2026 in Minneapolis on May 18, positioning both as hardened Linux foundations for cloud-native, containerized, and AI workloads on Azure. The...
Microsoft announced on May 18, 2026 that Azure Linux 4.0 is headed to public preview on Azure Virtual Machines, while Azure Container Linux is becoming generally available as Microsoft’s immutable, container-optimized operating system for cloud workloads. The timing matters because this is no...
Microsoft announced Azure Linux 4.0 at Open Source Summit North America in Minneapolis on May 18, 2026, turning its formerly container-focused Azure Linux work into a supported, general-purpose server distribution for Azure virtual machines while separating container hosting into Azure Container...
Microsoft’s Azure Linux may be approaching its most consequential architectural shift since the CBL-Mariner project first became visible outside Redmond. Recent Fedora meeting logs and a Fedora 45 change proposal suggest Microsoft is exploring a much tighter relationship with Fedora Linux...
There’s a reason sovereign cloud has moved from a niche compliance topic to a board-level strategic question: geopolitics, regulatory pressure, and public-sector procurement rules are now reshaping where organizations feel safe hosting data and running workloads. Microsoft is responding with a...
Microsoft’s security trackers recorded a new elevation‑of‑privilege problem in the Linux Azure Diagnostic extension (LAD) — tracked as CVE‑2026‑23665 — that Microsoft and multiple independent aggregators describe as a heap‑based buffer overflow in the LAD components used with Azure Linux virtual...
A careful reading of Microsoft’s short MSRC advisory shows what it actually is: a product‑scoped inventory attestation naming Azure Linux (Microsoft’s cloud‑focused Linux distribution) as a confirmed carrier of the affected open‑source code — not a categorical statement that no other Microsoft...
Microsoft’s short public mapping that “Azure Linux includes this open‑source library and is therefore potentially affected” is accurate for the Azure Linux images Microsoft inspected — but it is not a technical guarantee that no other Microsoft product can or does include the same vulnerable...
Microsoft’s public attestation that “Azure Linux includes this open‑source library and is therefore potentially affected” is an important, product‑scoped inventory signal — but it is not a categorical guarantee that no other Microsoft product contains the same vulnerable GnuTLS code...
Cloudflare’s fork of the venerable zlib compression library was found to contain memory‑corruption bugs in its deflate implementation (deflate.c), tracked as CVE‑2023‑6992, and Microsoft’s public advisory names Azure Linux as a product that “includes this open‑source library and is therefore...
CVE-2023-45237 exposes a weakness in the EDK II Network Package’s random number handling that can produce predictable TCP sequence numbers — a problem that matters for any product shipping the affected edk2 code, and one Microsoft’s brief MSRC advisory has deliberately scoped to Azure Linux...
Microsoft’s MSRC advisory is correct and actionable for Azure Linux: the company has attested that the Azure Linux distribution includes the vulnerable open‑source component (the Rust crate vmm‑sys‑util) implicated by CVE‑2023‑50711, and it has committed to updating its product mappings if...