Microsoft’s short answer — that “Azure Linux includes this open‑source library and is therefore potentially affected” — is correct and actionable for Azure Linux customers, but it is deliberately scoped: it confirms an inventory result for Azure Linux and does not prove that no other Microsoft...
Microsoft’s MSRC entry for CVE‑2025‑37745 correctly identifies a Linux‑kernel fix — a deadlock avoidance change in hibernate_compressor_param_set — and explicitly states that Azure Linux “includes this open‑source library and is therefore potentially affected,” but that narrow phrasing is an...