A short, unchecked null-pointer dereference in the Linux kernel’s ATM CLIP code — tracked as CVE‑2025‑38460 — has been assigned and fixed upstream, and Microsoft’s public guidance confirms Azure Linux as a confirmed attested product that includes the affected open‑source library; however, Azure...