A subtle but dangerous memory-handling bug in the Linux kernel’s mpi3mr SCSI driver — tracked as CVE-2023-53376 — has been fixed upstream after maintainers discovered that the driver was calculating bitmap sizes in bytes while calling bitmap helper functions that expect sizes in bits, allowing...
Microsoft’s public attestation that “Azure Linux includes this open‑source library and is therefore potentially affected” should be read as a deliberate, product‑scoped inventory statement — authoritative for Azure Linux, useful for automation, but not proof that no other Microsoft product can...
The Linux kernel defect tracked as CVE-2025-37861 — a race in the SCSI mpi3mr driver where the task‑management (tm) thread can access an invalid reply‑queue ID while a reset thread is in progress — has been fixed upstream, and Microsoft’s public advisory confirms that Azure Linux images include...