DSA-2025-355: Security Update for Dell Custom VMware ESXi vulnerabilities
Resumen: Dell Custom VMware ESXi remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.
Impacto
Critical
Detalles
|
Third-party Component |
CVEs |
More Information |
|
VMXNET3 virtual network adapter |
CVE-2025-41236 |
|
|
Virtual Machine Communication Interface (VMCI) |
CVE-2025-41237 |
|
|
ParaVirtualized SCSI (PVSCSI) |
CVE-2025-41238 |
|
|
vSockets |
CVE-2025-41239 |
Corrección y productos afectados
|
CVEs Addressed |
Product |
Affected Versions |
Remediated Versions |
Link |
|
CVE-2025-41236, CVE-2025-41237, CVE-2025-41238, CVE-2025-41239 |
VMware ESXi |
Versions prior to ESXi 8.0 Update 3f |
Version ESXi 8.0 Update 3f or later |
|
|
CVE-2025-41237 |
VMware ESXi |
Versions prior to ESXi 9.0.0.0100 |
Version ESXi 9.0.0.0100 or later |
|
CVEs Addressed |
Product |
Affected Versions |
Remediated Versions |
Link |
|
CVE-2025-41236, CVE-2025-41237, CVE-2025-41238, CVE-2025-41239 |
VMware ESXi |
Versions prior to ESXi 8.0 Update 3f |
Version ESXi 8.0 Update 3f or later |
|
|
CVE-2025-41237 |
VMware ESXi |
Versions prior to ESXi 9.0.0.0100 |
Version ESXi 9.0.0.0100 or later |
- Customers can upgrade the VMware security patches directly from the Broadcom Support Portal prior to the availability of the Dell custom VMware ESXi image. The expected availability of the Dell custom VMware ESXi image is November 2025.
- Please refer to VMSA-2025-0013 for instructions on patch installation.
- The Affected Products and Remediation table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.
Historial de revisiones
|
Revision |
Date |
Description |
|
1.0 |
2025-09-24 |
Initial Release |