cve 2025 5351

CVE-2025-5351 is a double-free vulnerability in the libssh library's pki_key_to_blob() function, which can corrupt heap memory during error handling and potentially crash applications performing key export operations. Microsoft's advisory confirms Azure Linux as a carrier of the vulnerable component and commits to expanding CSAF/VEX attestations for product inventories. The tag covers discussions about the technical details of the bug, its impact on Azure Linux, and Microsoft's response. Users interested in security updates, vulnerability management, and open-source library risks in enterprise environments will find relevant information under this tag.