cve 2025 38591

CVE-2025-38591 is a Linux kernel vulnerability that Microsoft has publicly attested to in Azure Linux. Discussions on WindowsForum clarify that Microsoft's advisory language means Azure Linux is the only Microsoft product the company has explicitly confirmed to ship the affected upstream kernel code, but this is an inventory attestation, not a guarantee that other Microsoft artifacts lack the same code. The tag covers analysis of Microsoft's advisory scope, the distinction between attestation and actual code presence, and implications for Azure Linux users tracking kernel patches related to this CVE.