cve 2025 37905

  1. Azure Linux MSRC Attestation and CVE-2025-37905: Understanding Scope

    The short answer is: no — Microsoft’s MSRC attestation naming Azure Linux as “potentially affected” does not prove that Azure Linux is the only Microsoft product that could carry the vulnerable open‑source code. Microsoft’s advisory is an authoritative inventory statement for Azure Linux itself...