The Linux kernel received a targeted fix for a crash in the MSCC Ocelot driver that could be triggered when adding an interface to a Link Aggregation Group (LAG), tracked as CVE-2026-22982 — a local, denial-of-service vulnerability rooted in a NULL pointer dereference in the ocelot driver's...
Microsoft’s concise attestation that “Azure Linux includes this open‑source library and is therefore potentially affected” is accurate — but it is a scoped inventory statement, not proof that no other Microsoft product can or does contain the same vulnerable kernel code. Background / Overview...