DSA-2025-355: Security Update for Dell Custom VMware ESXi vulnerabilities

Riepilogo: Dell Custom VMware ESXi remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.

Questo articolo si applica a Questo articolo non si applica a Questo articolo non è legato a un prodotto specifico. Non tutte le versioni del prodotto sono identificate in questo articolo.

Impatto

Critical

Dettagli

Third-party Component

CVEs

More Information

VMXNET3 virtual network adapter

CVE-2025-41236

VMSA-2025-0013This hyperlink is taking you to a website outside of Dell Technologies.

Virtual Machine Communication Interface (VMCI)

CVE-2025-41237

VMSA-2025-0013This hyperlink is taking you to a website outside of Dell Technologies.

ParaVirtualized SCSI (PVSCSI)

CVE-2025-41238

VMSA-2025-0013This hyperlink is taking you to a website outside of Dell Technologies.

vSockets

CVE-2025-41239

VMSA-2025-0013This hyperlink is taking you to a website outside of Dell Technologies.

 

Dell Technologies raccomanda a tutti i clienti di prendere in considerazione sia il punteggio base CVSS, sia ogni eventuale punteggio temporale o ambientale che possa avere effetti sul livello di gravità potenziale associato a una specifica vulnerabilità di sicurezza.

Prodotti interessati e correzione

CVEs Addressed

Product

Affected Versions

Remediated Versions

Link

CVE-2025-41236, CVE-2025-41237, CVE-2025-41238, CVE-2025-41239

VMware ESXi

Versions prior to ESXi 8.0 Update 3f

Version ESXi 8.0 Update 3f or later

Broadcom Support PortalThis hyperlink is taking you to a website outside of Dell Technologies.

CVE-2025-41237

VMware ESXi

Versions prior to ESXi 9.0.0.0100

Version ESXi 9.0.0.0100 or later

Broadcom Support PortalThis hyperlink is taking you to a website outside of Dell Technologies.

 

CVEs Addressed

Product

Affected Versions

Remediated Versions

Link

CVE-2025-41236, CVE-2025-41237, CVE-2025-41238, CVE-2025-41239

VMware ESXi

Versions prior to ESXi 8.0 Update 3f

Version ESXi 8.0 Update 3f or later

Broadcom Support PortalThis hyperlink is taking you to a website outside of Dell Technologies.

CVE-2025-41237

VMware ESXi

Versions prior to ESXi 9.0.0.0100

Version ESXi 9.0.0.0100 or later

Broadcom Support PortalThis hyperlink is taking you to a website outside of Dell Technologies.

 

  • Customers can upgrade the VMware security patches directly from the Broadcom Support Portal prior to the availability of the Dell custom VMware ESXi image.  The expected availability of the Dell custom VMware ESXi image is November 2025. 
  • Please refer to VMSA-2025-0013 for instructions on patch installation. 
  • The Affected Products and Remediation table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.

Cronologia delle revisioni

Revision

Date

Description

1.0

2025-09-24

Initial Release

 

Informazioni correlate

Prodotti interessati

VMware ESXi 8.x, VMware ESXi 9.x
Proprietà dell'articolo
Numero articolo: 000373451
Tipo di articolo: Dell Security Advisory
Ultima modifica: 24 set 2025
Trova risposta alle tue domande dagli altri utenti Dell
Support Services
Verifica che il dispositivo sia coperto dai Servizi di supporto.