cve 2025 40102

CVE-2025-40102 is a Linux kernel vulnerability affecting the arm64 KVM codepath, specifically a condition where userspace can pend vCPU events before initialization. Microsoft's advisory confirms that Azure Linux includes the affected open-source library and is potentially impacted, but this is a product-scoped attestation rather than a statement that no other Microsoft product contains the vulnerable component. Discussions on WindowsForum.com analyze the broader implications for Microsoft kernel security, emphasizing that the advisory does not rule out other Microsoft products being affected. The tag covers technical details of the bug, its impact on Azure Linux, and the context of Microsoft's response.