What is CVE-2025-31115?

CVE-2025-31115 is a security advisory published by Microsoft with High severity. EchelonGraph links Microsoft's advisory rather than copying its page; it is at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-31115.

Which CVE IDs does CVE-2025-31115 cover?

CVE-2025-31115 covers the following CVE IDs: CVE-2025-31115. Each CVE has its own detail page on EchelonGraph Pulse with its EchelonGraph score.

Which products are affected by CVE-2025-31115?

CVE-2025-31115 affects 1 product, including: azl3 xz 5.4.4-2 on Azure Linux 3.0.

How do I remediate CVE-2025-31115?

Microsoft lists 1 update for CVE-2025-31115. It is listed on this page with its fixed build; Microsoft's advisory is at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-31115.

CVE-2025-31115High

Microsoft security update for CVE-2025-31115 — azl3 xz 5.4.4-2 on Azure Linux 3.0

Vendor

Microsoft Security Response Center (MSRC)

Published

April 11, 2025

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2025-31115 →

📋 Microsoft's advisory

EchelonGraph does not copy Microsoft's advisory page: its FAQ and remediation text are not shown here. Read the advisory on https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-31115. This page also shows what EchelonGraph holds for CVE-2025-31115.

🎯 Affected products1

azl3 xz 5.4.4-2 on Azure Linux 3.0

✅ Updates Microsoft lists: 1 update

1 row: one per KB article or update, update type and fixed build. Their details are on Microsoft's advisory.

KB article	Update	Fixed build
—	Security Update	5.4.4-2

🧭 EchelonGraph on CVE-2025-31115

EchelonGraph score: 8.7 HIGH
CISA KEV: Not listed
Fix status: A fix is available — apply it.

🔗 References (2)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-31115
referencehttps://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade