cve 2025 38401

Microsoft’s brief advisory is accurate but narrowly scoped: Microsoft has attested that Azure Linux includes the upstream mtk-sd open‑source component and is therefore potentially affected by CVE‑2025‑38401, but that attestation is product‑scoped — not a guarantee that no other Microsoft product...