cve 2025 38464

CVE-2025-38464 is a high-severity use-after-free vulnerability in the Linux kernel's TIPC (Transparent Inter-Process Communication) subsystem. The flaw has been fixed upstream, and Microsoft's Security Response Center (MSRC) has published a VEX/CSAF attestation indicating that Azure Linux includes the implicated kernel component and is potentially affected. However, this attestation is product-scoped and should not be interpreted as proof that no other Microsoft artifact contains the same vulnerable code. Discussions on WindowsForum.com cover the technical details of the vulnerability, its impact, and the scope of Microsoft's attestation, providing clarity for IT professionals and security researchers evaluating their exposure.