The short answer is: Microsoft has publicly attested that Azure Linux (the distro formerly known as CBL‑Mariner) includes the upstream component implicated by CVE‑2024‑26909 and is therefore potentially affected, but that attestation is a product‑scoped inventory statement — it is not a...