A kernel flaw in the Sound Open Firmware (SOF) IPC4 topology code — tracked as CVE-2025-21870 — can cause NULL-pointer dereferences and broken audio pipelines on affected Linux kernels, and Microsoft’s public attestation that “Azure Linux includes this open‑source library and is therefore...