Microsoft’s brief public mapping for CVE-2025-38307 — “Azure Linux includes this open‑source library and is therefore potentially affected” — is accurate for the product it names, but it is a product‑scoped inventory attestation, not a technical guarantee that no other Microsoft product can...