cve 2025 23131

CVE-2025-23131 is a Linux-kernel vulnerability in the Distributed Lock Manager (dlm) subsystem that can cause a NULL-pointer dereference when positive return values are mishandled during lockspace creation. Discussions on WindowsForum.com clarify that Microsoft's advisory stating "Azure Linux includes this open-source library and is therefore potentially affected" is a product-scoped attestation, not a claim that all Microsoft products are vulnerable. The content emphasizes that not all Microsoft artifacts are affected and provides technical background on the flaw. This tag is relevant for IT professionals and security researchers tracking Linux kernel vulnerabilities, particularly those involving Azure Linux and Microsoft's attestation practices.