🛡️Microsoft Ships Azure Linux Update Packing 470+ CVE Fixes

Your Azure Linux images need patching this week

Microsoft just shipped an Azure Linux release with over 470 CVE fixes in one go. If you run Azure Linux nodes or images, this is not a skip-and-check-later update. The patches cover the Linux kernel, OpenSSL, curl, Kubernetes, Docker, QEMU, and containerd. Container infrastructure gets a lot of attention, including KubeVirt and Docker Compose. Several CVEs show up repeatedly across these packages, which is a sign that the same code paths keep breaking. The headline item is housekeeping after the eMudhra certificate incident, tracked as CVE-2026-114406. Microsoft removed or distrusted root certificates that could validate compromised eMudhra intermediates, and added checks in Python and Go to reject the affected certs. The generic kernel moves to 6.6.161.1, eBPF fixes are included, and SSL.com TLS trust is preserved where needed. The release also carries smaller changes like new Dockerfiles, an OpenVMM patch, GRUB Secure Boot metadata updates, and systemd hang fixes. Microsoft's patching teams are not likely done either, given how fast vulnerability discovery is accelerating.