Msrc Azl3 Cloud-Hypervisor 41.0.139-1 On Azure Linux 3.0 vulnerabilities

CVE-2025-9230 [HIGH] CWE-125 Out-of-bounds read & write in RFC 3211 KEK Unwrap Out-of-bounds read & write in RFC 3211 KEK Unwrap FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is

CVE-2025-9231 [MEDIUM] CWE-385 Timing side-channel in SM2 algorithm on 64 bit ARM Timing side-channel in SM2 algorithm on 64 bit ARM FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro

CVE-2025-9232 [MEDIUM] CWE-125 Out-of-bounds read in HTTP client no_proxy handling Out-of-bounds read in HTTP client no_proxy handling FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the dist

CVE-2024-12797 [MEDIUM] CWE-392 RFC7250 handshakes with unauthenticated servers don't abort as expected RFC7250 handshakes with unauthenticated servers don't abort as expected FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the

CVE-2024-9143 [MEDIUM] CWE-787 Low-level invalid GF(2^m) parameters lead to OOB memory access Low-level invalid GF(2^m) parameters lead to OOB memory access FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source librari