cve 2024 44987

CVE-2024-44987 is a Linux kernel vulnerability that affects Azure Linux images. Microsoft has issued a product-level attestation confirming that Azure Linux includes the vulnerable open-source library and is therefore potentially affected. This CVE is relevant for Azure Linux customers and system administrators managing Microsoft's Linux-based cloud infrastructure. The vulnerability is documented in Microsoft's machine-readable vulnerability exploitability exchange (VEX) and software bill of materials (SBOM) for Azure Linux, providing transparency for security assessments. Discussions on WindowsForum focus on the scope of the CVE, its impact on Microsoft images, and the authoritative nature of Microsoft's disclosure for Azure Linux users.