cve 2025 4432

CVE-2025-4432 is an availability/denial-of-service vulnerability affecting the Rust cryptography crate ring. Microsoft has publicly attested that Azure Linux includes this open-source library and is therefore potentially affected. However, this attestation does not categorically exclude other Microsoft products from containing the vulnerable ring crate. The absence of attestations for other products is not proof of absence. This tag covers discussions about the scope of the vulnerability, Microsoft's guidance, and the broader software supply chain implications, including SBOM, cargo-tree, and patched versions (0.17.12+).