Microsoft’s public attestation that “Azure Linux includes this open‑source library and is therefore potentially affected” is a precise, product‑scoped statement — authoritative for Azure Linux — but it is not proof that no other Microsoft product ships the same vulnerable virtiofs code...