cve 2025 38495

  1. CVE-2025-38495: Azure Linux HID Code and CSAF VEX Attestations

    Microsoft’s short advisory that “Azure Linux includes this open‑source library and is therefore potentially affected” is accurate — but it is a product‑scoped attestation, not proof that Azure Linux is the only Microsoft product that could carry the vulnerable HID kernel code. Background /...