cve 2025 39707

CVE-2025-39707 is a Linux kernel vulnerability in the amdgpu debugfs driver that involves a missing NULL check, potentially leading to a denial of service or other impacts. Microsoft has acknowledged that Azure Linux includes the affected open-source library and is therefore potentially impacted. However, the vulnerability may also affect other Microsoft products that incorporate the same kernel code, such as the WSL2 kernel, which includes the amdgpu driver. Users should monitor Microsoft's official VEX/CSAF attestations for a complete inventory of affected products. This tag covers discussions about the scope of CVE-2025-39707 across Microsoft's ecosystem and the implications for Azure Linux and other Windows-related components.