The recently assigned CVE‑2025‑39713 is a kernel‑level TOCTOU (time‑of‑check/time‑of‑use) race in the Linux media driver rainshadow‑cec that can lead to a buffer overflow in the interrupt handler; Microsoft’s public advisory for this CVE names Azure Linux as a product that “includes this...
