Microsoft’s advisory that CVE-2025-38040 affects “Azure Linux” is technically correct as a first-tranche disclosure, but it is incomplete as a statement of exposure risk for Microsoft’s entire product portfolio — and it understates what maintainers and operators need to check to be sure they are...