cve 2025 37822

CVE-2025-37822 is a Linux kernel vulnerability specific to RISC-V architecture, affecting the uprobes subsystem. The issue involves the execute-out-of-line (XOL) buffer code failing to perform an instruction-cache flush (fence.i), which can lead to correctness problems. Microsoft has confirmed that Azure Linux includes the affected open-source library and is potentially impacted. Discussions on WindowsForum focus on verifying artifact-level exposure and understanding Microsoft's product-level attestations. Users explore whether other Microsoft products may also ship the vulnerable component, emphasizing the need for careful verification beyond official statements.