cve 2025 38259

CVE-2025-38259 is a Linux kernel vulnerability in the ALSA ASoC codec driver for the WCD9335 family, where the driver gets and enables regulator supplies. Microsoft has confirmed via MSRC that Azure Linux includes the affected open-source library and is therefore potentially impacted. However, this statement does not imply that other Microsoft products contain the same vulnerable kernel component; Azure Linux is the only Microsoft product publicly attested to include the code so far. Discussions on WindowsForum.com clarify the scope of this CVE for Microsoft products, emphasizing that the patch guidance is specific to Azure Linux and not a blanket warning for all Microsoft software.