cve 2025 38709

The tag CVE-2025-38709 covers a Linux kernel vulnerability involving a race condition in the loop device driver. The flaw allows a Syzbot reproducer to change a loop device's block size while a filesystem mounted on it retains exclusive ownership, leading to mismatched block sizes, buffer confusion, and kernel warnings. Microsoft's public attestation currently lists Azure Linux as the affected Microsoft product, with plans to update the mapping if other Microsoft products are found to include the same upstream component. Discussions on WindowsForum.com focus on the technical details of the race condition and its implications for Azure Linux users.