Microsoft’s short MSRC entry for CVE-2025-37984 — the Linux-kernel ECDSA hardening fix around DIV_ROUND_UP() — is accurate for the product it names, but it is not a categorical statement that no other Microsoft product could contain the same vulnerable upstream code; instead it is a...