Merge pull request #229317 from MGoedtel/UpdateVulnerabilityMgmt

edited PM edits to Vulernability Mgmt article

Author: prmerger-automator[bot]

articles/aks/concepts-vulnerability-management.md

@@ -47,11 +47,11 @@ In addition to automated scanning, Microsoft discovers and updates vulnerabiliti
 
 ### Linux nodes
 
-Each evening, Linux nodes in AKS receive security patches through their distribution security update channel. This behavior is automatically configured, as the nodes are deployed in an AKS cluster. To minimize disruption and potential impact to running workloads, nodes aren't automatically rebooted if a security patch or kernel update requires it. For more information about how to handle node reboots, see [Apply security and kernel updates to nodes in AKS][apply-security-kernel-updates-to-aks-nodes]. 
+Each evening, Linux nodes in AKS receive security patches through their distribution security update channel. This behavior is automatically configured, as the nodes are deployed in an AKS cluster. To minimize disruption and potential impact to running workloads, nodes aren't automatically rebooted if a security patch or kernel update requires it. For more information about how to handle node reboots, see [Apply security and kernel updates to nodes in AKS][apply-security-kernel-updates-to-aks-nodes].
 
 Nightly, we apply security updates to the OS on the node, but the node image used to create nodes for your cluster remains unchanged. If a new Linux node is added to your cluster, the original image is used to create the node. This new node receives all the security and kernel updates available during the automatic assessment performed every night, but remains unpatched until all checks and restarts are complete. You can use node image upgrade to check for and update node images used by your cluster. For more information on node image upgrade, see [Azure Kubernetes Service (AKS) node image upgrade][aks-node-image-upgrade].
 
-For AKS clusters on the [OS auto upgrade](https://learn.microsoft.com/azure/aks/auto-upgrade-node-image) channel, the unattended upgrade process is disabled, and the OS nodes will receive security updates through the weekly node image upgrade.
+For AKS clusters on the [OS auto upgrade][aks-node-image-upgrade] channel, the unattended upgrade process is disabled, and the OS nodes will receive security updates through the weekly node image upgrade.
 
 ### Windows Server nodes
 
@@ -84,7 +84,7 @@ Microsoft's goal is to mitigate detected vulnerabilities within a time period ap
 
 ## How vulnerabilities and updates are communicated
 
-In general, Microsoft doesn't broadly communicate the release of new patch versions for AKS. However, Microsoft constantly monitors and validates available CVE patches to support them in AKS in a timely manner. If a critical patch is found or user action is required, Microsoft [posts and update on github][aks-cve-feed].
+In general, Microsoft doesn't broadly communicate the release of new patch versions for AKS. However, Microsoft constantly monitors and validates available CVE patches to support them in AKS in a timely manner. If a critical patch is found or user action is required, Microsoft [posts and updates CVE issue details on GitHub][aks-cve-feed].
 
 ## Security Reporting
 
@@ -122,6 +122,7 @@ See the overview about [Upgrading Azure Kubernetes Service clusters and node poo
 [apply-security-kernel-updates-to-aks-nodes]: node-updates-kured.md
 [aks-node-image-upgrade]: node-image-upgrade.md
 [upgrade-node-pool-in-aks]: use-multiple-node-pools.md#upgrade-a-node-pool
+[aks-node-image-upgrade]: auto-upgrade-node-image.md 
 
 <!-- LINKS - external -->
 [microsoft-bug-bounty-program-overview]: https://aka.ms/opensource/security/bounty