DSA-2025-355: Security Update for Dell Custom VMware ESXi vulnerabilities
Résumé: Dell Custom VMware ESXi remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.
Impact
Critical
Détails
|
Third-party Component |
CVEs |
More Information |
|
VMXNET3 virtual network adapter |
CVE-2025-41236 |
|
|
Virtual Machine Communication Interface (VMCI) |
CVE-2025-41237 |
|
|
ParaVirtualized SCSI (PVSCSI) |
CVE-2025-41238 |
|
|
vSockets |
CVE-2025-41239 |
Produits concernés et mesure corrective
|
CVEs Addressed |
Product |
Affected Versions |
Remediated Versions |
Link |
|
CVE-2025-41236, CVE-2025-41237, CVE-2025-41238, CVE-2025-41239 |
VMware ESXi |
Versions prior to ESXi 8.0 Update 3f |
Version ESXi 8.0 Update 3f or later |
|
|
CVE-2025-41237 |
VMware ESXi |
Versions prior to ESXi 9.0.0.0100 |
Version ESXi 9.0.0.0100 or later |
|
CVEs Addressed |
Product |
Affected Versions |
Remediated Versions |
Link |
|
CVE-2025-41236, CVE-2025-41237, CVE-2025-41238, CVE-2025-41239 |
VMware ESXi |
Versions prior to ESXi 8.0 Update 3f |
Version ESXi 8.0 Update 3f or later |
|
|
CVE-2025-41237 |
VMware ESXi |
Versions prior to ESXi 9.0.0.0100 |
Version ESXi 9.0.0.0100 or later |
- Customers can upgrade the VMware security patches directly from the Broadcom Support Portal prior to the availability of the Dell custom VMware ESXi image. The expected availability of the Dell custom VMware ESXi image is November 2025.
- Please refer to VMSA-2025-0013 for instructions on patch installation.
- The Affected Products and Remediation table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.
Historique des révisions
|
Revision |
Date |
Description |
|
1.0 |
2025-09-24 |
Initial Release |