Microsoft’s short answer — no: the MSRC note that “Azure Linux includes this open‑source library and is therefore potentially affected” is a product‑scoped attestation, not a technical guarantee that no other Microsoft product or image could carry the same vulnerable component. The CVE in...