cve 2025 40083

The Linux kernel fix for CVE-2025-40083 — a null-pointer dereference corrected in net/sched’s sch_qfq agg_dequeue routine — is real, narrow in scope, and already merged upstream; Microsoft’s public advisory that “Azure Linux includes this open‑source library and is therefore potentially...