Azure Linux is the only Microsoft product Microsoft has publicly attested so far to include the upstream component implicated by CVE-2025-38377 — but that attestation is a product‑scoped inventory statement, not a guarantee that no other Microsoft product or image could contain the same...