cve 2025 37891

Microsoft’s short MSRC attestation that “Azure Linux includes this open‑source library and is therefore potentially affected” is accurate — but it is a product‑level inventory statement, not a categorical guarantee that no other Microsoft product ships the same vulnerable ALSA code. Background /...