[Security] The Cross-Platform False Positive Problem: Why Vulnerability Scanners Flag Windows CVEs on Linux