DSA-2025-355: Security Update for Dell Custom VMware ESXi vulnerabilities

Summary: Dell Custom VMware ESXi remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Impact

Critical

Details

Third-party Component

CVEs

More Information

VMXNET3 virtual network adapter

CVE-2025-41236

VMSA-2025-0013This hyperlink is taking you to a website outside of Dell Technologies.

Virtual Machine Communication Interface (VMCI)

CVE-2025-41237

VMSA-2025-0013This hyperlink is taking you to a website outside of Dell Technologies.

ParaVirtualized SCSI (PVSCSI)

CVE-2025-41238

VMSA-2025-0013This hyperlink is taking you to a website outside of Dell Technologies.

vSockets

CVE-2025-41239

VMSA-2025-0013This hyperlink is taking you to a website outside of Dell Technologies.

 

Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.

Affected Products & Remediation

CVEs Addressed

Product

Affected Versions

Remediated Versions

Link

CVE-2025-41236, CVE-2025-41237, CVE-2025-41238, CVE-2025-41239

VMware ESXi

Versions prior to ESXi 8.0 Update 3f

Version ESXi 8.0 Update 3f or later

Broadcom Support PortalThis hyperlink is taking you to a website outside of Dell Technologies.

CVE-2025-41237

VMware ESXi

Versions prior to ESXi 9.0.0.0100

Version ESXi 9.0.0.0100 or later

Broadcom Support PortalThis hyperlink is taking you to a website outside of Dell Technologies.

 

CVEs Addressed

Product

Affected Versions

Remediated Versions

Link

CVE-2025-41236, CVE-2025-41237, CVE-2025-41238, CVE-2025-41239

VMware ESXi

Versions prior to ESXi 8.0 Update 3f

Version ESXi 8.0 Update 3f or later

Broadcom Support PortalThis hyperlink is taking you to a website outside of Dell Technologies.

CVE-2025-41237

VMware ESXi

Versions prior to ESXi 9.0.0.0100

Version ESXi 9.0.0.0100 or later

Broadcom Support PortalThis hyperlink is taking you to a website outside of Dell Technologies.

 

  • Customers can upgrade the VMware security patches directly from the Broadcom Support Portal prior to the availability of the Dell custom VMware ESXi image.  The expected availability of the Dell custom VMware ESXi image is November 2025. 
  • Please refer to VMSA-2025-0013 for instructions on patch installation. 
  • The Affected Products and Remediation table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.

Revision History

Revision

Date

Description

1.0

2025-09-24

Initial Release

 

Related Information

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Legal Disclaimer

Affected Products

VMware ESXi 8.x, VMware ESXi 9.x
Article Properties
Article Number: 000373451
Article Type: Dell Security Advisory
Last Modified: 24 Sep 2025
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.