cve 2025 38406

Microsoft’s advisory names Azure Linux as the Microsoft-distributed product that includes the upstream open‑source component in question and is therefore potentially affected by CVE-2025-38406, but that statement is an artifact‑level attestation — not a claim of exclusivity — and it should not...