Microsoft’s short, specific attestation — that Azure Linux includes the open‑source library tied to CVE‑2025‑38722 — is accurate for the product inventory Microsoft has completed so far, but it is not a technical guarantee that no other Microsoft product could include the same vulnerable code...