cve 2025 38425

Microsoft’s MSRC advisory for CVE-2025-38425 states that “Azure Linux includes this open‑source library and is therefore potentially affected,” but that phrasing is a product‑level attestation — not an exclusive denial that other Microsoft products can or do include the same vulnerable code. The...