cve 2024 43913

CVE-2024-43913 is a vulnerability in the upstream NVMe driver code that affects Linux kernels. Microsoft has publicly attested that Azure Linux includes the vulnerable open-source library and is therefore potentially affected. However, this attestation does not confirm that other Microsoft products shipping or embedding Linux kernels are unaffected. Users should monitor Microsoft Security Response Center (MSRC) updates for further inventory of affected artifacts, including WSL2 kernels, Azure VM images, AKS node images, and container base images. The tag covers discussions about the scope of this CVE across Microsoft's Linux-based offerings and the importance of individual product inventory.