Microsoft’s short MSRC attestation that “Azure Linux includes this open‑source library and is therefore potentially affected” is accurate for CVE‑2025‑38193 — but it is a product‑scoped inventory statement, not a technical guarantee that no other Microsoft product or published image could...