The Linux kernel CVE‑2025‑39927 — a Ceph client race that validates r_parent before applying state — is real, has been merged upstream, and Microsoft’s public advisory correctly notes that Azure Linux includes the implicated open‑source code and is therefore potentially affected, but that...