cve 2025 37979

CVE-2025-37979 is a buffer overflow vulnerability in the Linux kernel's Qualcomm ASoC (audio) subsystem. Microsoft has officially mapped this upstream component to its Azure Linux distribution, confirming that Azure Linux includes the vulnerable open-source library and is therefore potentially affected. This vendor attestation is authoritative for Azure Linux, but it does not automatically prove that no other Microsoft product ships the same vulnerable kernel code. Discussions on WindowsForum.com cover the nature of the vulnerability, why Microsoft named Azure Linux, which Microsoft artifacts could or could not plausibly be affected, and how to verify exposure in your environment.