DSA-2026-259: Security Update for Dell Container Storage Modules Multiple Vulnerabilities

요약: Dell Container Storage Modules remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.

이 문서는 다음에 적용됩니다. 이 문서는 다음에 적용되지 않습니다. 이 문서는 특정 제품과 관련이 없습니다. 모든 제품 버전이 이 문서에 나와 있는 것은 아닙니다.
기타 리소스 확인

영향

Critical

세부 정보

Third-party Component CVEs More Information
sudo CVE-2025-32462
https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
gnupg2 CVE-2025-68973
https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
pam CVE-2024-10963, CVE-2025-6020, CVE-2025-8941
https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
sqlite CVE-2025-6965
https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
openssh CVE-2026-3497
https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
python3.9 CVE-2024-12718,CVE-2025-4517, CVE-2026-4519, CVE-2025-4138, CVE-2023-6597
https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
vim CVE-2026-28417,CVE-2026-33412, CVE-2026-28421
https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
curl CVE-2025-9086 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
glib2 CVE-2025-13601 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
openssl CVE-2025-69421, CVE-2025-69418, CVE-2026-22796, CVE-2025-15469, CVE-2026-22795, CVE-2024-12797, CVE-2025-15467, CVE-2025-68160, CVE-2025-11187, CVE-2025-15468, CVE-2025-69420, CVE-2025-66199, CVE-2025-69419, CVE-2025-9230 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
libarchive CVE-2025-5914, CVE-2026-4111 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
libxml2 CVE-2025-7425, CVE-2025-24928, CVE-2025-49796, CVE-2025-49794, CVE-2024-56171 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
expat CVE-2025-59375 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
python-urllib3 CVE-2025-66471, CVE-2026-21441, CVE-2025-66418 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
python-setuptools CVE-2024-6345 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
krb5 CVE-2024-3596 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
glibc CVE-2026-0915, CVE-2026-0861, CVE-2025-15281 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
systemd CVE-2025-4598 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
nghttp2 CVE-2026-27135 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
google.golang.org/grpc CVE-2026-33186 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
brotli CVE-2025-6176 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
crypto/x509 CVE-2025-61729 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
net/url CVE-2025-61726, CVE-2026-25679 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.

Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE-2026-40711 Dell Dell Container Storage Modules, version(s) csi-powerstore v2.16.0, csi-unity v2.16.0, csi-powerflex v2.16.0, csi-powermax v2.16.0, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. 8.0
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H This hyperlink is taking you to a website outside of Dell Technologies.
Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE-2026-40711 Dell Dell Container Storage Modules, version(s) csi-powerstore v2.16.0, csi-unity v2.16.0, csi-powerflex v2.16.0, csi-powermax v2.16.0, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. 8.0
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H This hyperlink is taking you to a website outside of Dell Technologies.
Dell Technologies는 모든 고객이 CVSS 기본 점수와 관련 임시 및 환경 점수를 모두 고려할 것을 권장합니다. 이 경우 특정 보안 취약성과 관련된 잠재적인 심각도에 영향을 미칠 수 있습니다.

영향을 받는 제품 및 문제 해결

CVE ID(s) Product  Software/Firmware Affected Versions  Remediated Versions  Link
CVE-2026-40711 Dell Container Storage Modules CSI Driver for Dell PowerFlex Versions 2.15.0 through 2.15.1 Version 2.15.2 or later

quay.io/dell/container-storage-modules/csi-vxflexos This hyperlink is taking you to a website outside of Dell Technologies.
CVE-2026-40711 Dell Container Storage Modules CSI Driver for Dell PowerFlex Versions prior to 2.17.0 Version 2.17.0 or later

quay.io/dell/container-storage-modules/csi-vxflexos 

This hyperlink is taking you to a website outside of Dell Technologies.
CVE-2026-40711 Dell Container Storage Modules CSI Driver for Dell PowerStore Versions prior to 2.17.0 Version 2.17.0 or later quay.io/dell/container-storage-modules/csi-powerstore 

This hyperlink is taking you to a website outside of Dell Technologies.
CVE-2026-40711 Dell Container Storage Modules CSI Driver for Dell Unity XT Versions prior to 2.17.0 Version 2.17.0 or later quay.io/dell/container-storage-modules/csi-unity

This hyperlink is taking you to a website outside of Dell Technologies.
CVE-2026-40711 Dell Container Storage Modules CSI Driver for Dell PowerMax Versions prior to 2.17.0 Version 2.17.0 or later quay.io/dell/container-storage-modules/csi-powermax 

This hyperlink is taking you to a website outside of Dell Technologies.
CVE-2024-12718, CVE-2026-28417, CVE-2025-32462, CVE-2025-68973, CVE-2025-13601, CVE-2025-69421, CVE-2025-69418, CVE-2024-10963, CVE-2025-9086, CVE-2025-4598, CVE-2025-4517, CVE-2026-4519, CVE-2025-6965, CVE-2026-33412, CVE-2026-3497, CVE-2025-15469, CVE-2026-22795, CVE-2025-49796, CVE-2025-49794, CVE-2026-21441, CVE-2025-66418, CVE-2026-22796, CVE-2024-56171, CVE-2024-12797, CVE-2025-4138, CVE-2025-59375, CVE-2025-15467, CVE-2025-68160, CVE-2025-66471, CVE-2023-6597, CVE-2025-11187, CVE-2026-0861, CVE-2025-6020, CVE-2025-24928, CVE-2026-28421, CVE-2025-15468, CVE-2026-0915, CVE-2025-8941, CVE-2024-6345, CVE-2024-3596, CVE-2025-69420, CVE-2025-15281, CVE-2026-27135, CVE-2025-66199, CVE-2025-7425, CVE-2025-69419, CVE-2025-5914, CVE-2025-9230, CVE-2026-4111, CVE-2026-33186, CVE-2025-6176, CVE-2025-61729, CVE-2025-61726, CVE-2026-25679 Dell Container Storage Modules csi-powerflex Versions prior to 1.15.2 Version 1.15.2 and later

quay.io/dell/container-storage-modules/csi-vxflexos 

This hyperlink is taking you to a website outside of Dell Technologies.
CVE ID(s) Product  Software/Firmware Affected Versions  Remediated Versions  Link
CVE-2026-40711 Dell Container Storage Modules CSI Driver for Dell PowerFlex Versions 2.15.0 through 2.15.1 Version 2.15.2 or later

quay.io/dell/container-storage-modules/csi-vxflexos This hyperlink is taking you to a website outside of Dell Technologies.
CVE-2026-40711 Dell Container Storage Modules CSI Driver for Dell PowerFlex Versions prior to 2.17.0 Version 2.17.0 or later

quay.io/dell/container-storage-modules/csi-vxflexos 

This hyperlink is taking you to a website outside of Dell Technologies.
CVE-2026-40711 Dell Container Storage Modules CSI Driver for Dell PowerStore Versions prior to 2.17.0 Version 2.17.0 or later quay.io/dell/container-storage-modules/csi-powerstore 

This hyperlink is taking you to a website outside of Dell Technologies.
CVE-2026-40711 Dell Container Storage Modules CSI Driver for Dell Unity XT Versions prior to 2.17.0 Version 2.17.0 or later quay.io/dell/container-storage-modules/csi-unity

This hyperlink is taking you to a website outside of Dell Technologies.
CVE-2026-40711 Dell Container Storage Modules CSI Driver for Dell PowerMax Versions prior to 2.17.0 Version 2.17.0 or later quay.io/dell/container-storage-modules/csi-powermax 

This hyperlink is taking you to a website outside of Dell Technologies.
CVE-2024-12718, CVE-2026-28417, CVE-2025-32462, CVE-2025-68973, CVE-2025-13601, CVE-2025-69421, CVE-2025-69418, CVE-2024-10963, CVE-2025-9086, CVE-2025-4598, CVE-2025-4517, CVE-2026-4519, CVE-2025-6965, CVE-2026-33412, CVE-2026-3497, CVE-2025-15469, CVE-2026-22795, CVE-2025-49796, CVE-2025-49794, CVE-2026-21441, CVE-2025-66418, CVE-2026-22796, CVE-2024-56171, CVE-2024-12797, CVE-2025-4138, CVE-2025-59375, CVE-2025-15467, CVE-2025-68160, CVE-2025-66471, CVE-2023-6597, CVE-2025-11187, CVE-2026-0861, CVE-2025-6020, CVE-2025-24928, CVE-2026-28421, CVE-2025-15468, CVE-2026-0915, CVE-2025-8941, CVE-2024-6345, CVE-2024-3596, CVE-2025-69420, CVE-2025-15281, CVE-2026-27135, CVE-2025-66199, CVE-2025-7425, CVE-2025-69419, CVE-2025-5914, CVE-2025-9230, CVE-2026-4111, CVE-2026-33186, CVE-2025-6176, CVE-2025-61729, CVE-2025-61726, CVE-2026-25679 Dell Container Storage Modules csi-powerflex Versions prior to 1.15.2 Version 1.15.2 and later

quay.io/dell/container-storage-modules/csi-vxflexos 

This hyperlink is taking you to a website outside of Dell Technologies.

개정 내역

RevisionDateDescription
1.02026-06-18Initial release

관련 정보

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

법적 고지 사항

해당 제품

Container Storage Modules Family, Container Storage Modules
문서 속성
문서 번호: 000478300
문서 유형: Dell Security Advisory
마지막 수정 시간: 18 6월 2026
다른 Dell 사용자에게 질문에 대한 답변 찾기
지원 서비스
디바이스에 지원 서비스가 적용되는지 확인하십시오.