cve 2025 37883

CVE-2025-37883 is a Linux kernel vulnerability that Microsoft has publicly attested affects Azure Linux. The company's attestation states that Azure Linux includes the vulnerable open-source library and is therefore potentially affected. However, this is a product-scoped inventory statement, not proof that no other Microsoft product could include the same vulnerable kernel code. The technical realities of kernel source, builds, and configuration mean other Microsoft artifacts could theoretically be in scope until they are checked and attested as well. This tag covers discussions about the scope and implications of Microsoft's attestation regarding CVE-2025-37883.