Short answer (direct)
No — Azure Linux is not necessarily the only Microsoft product that could include the vulnerable upstream code. It is the only Microsoft product Microsoft has publicly attested (via its advisory/VEX/CSAF process) to include the implicated open‑source kernel component for...