cve 2025 39754

CVE-2025-39754 is a race condition vulnerability in the Linux kernel's memory reporting code, specifically in the smaps_rollup feature. This flaw could allow an attacker to cause a denial of service or potentially escalate privileges. Microsoft's advisory confirms that Azure Linux includes the affected open-source library and is potentially impacted. The advisory is a product-scope attestation for Azure Linux at the time of publication, but Microsoft has stated it will update the CVE/VEX mapping if additional products are found to contain the vulnerable component. This tag covers discussions about the vulnerability's implications for Azure Linux systems and Microsoft's response.