DSA-2025-355: Security Update for Dell Custom VMware ESXi vulnerabilities

Resumo: Dell Custom VMware ESXi remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.

Este artigo aplica-se a Este artigo não se aplica a Este artigo não está vinculado a nenhum produto específico. Nem todas as versões do produto estão identificadas neste artigo.

Impacto

Critical

Dados

Third-party Component

CVEs

More Information

VMXNET3 virtual network adapter

CVE-2025-41236

VMSA-2025-0013This hyperlink is taking you to a website outside of Dell Technologies.

Virtual Machine Communication Interface (VMCI)

CVE-2025-41237

VMSA-2025-0013This hyperlink is taking you to a website outside of Dell Technologies.

ParaVirtualized SCSI (PVSCSI)

CVE-2025-41238

VMSA-2025-0013This hyperlink is taking you to a website outside of Dell Technologies.

vSockets

CVE-2025-41239

VMSA-2025-0013This hyperlink is taking you to a website outside of Dell Technologies.

 

A Dell Technologies recomenda que todos os clientes levem em consideração a pontuação base CVSS e as pontuações temporais e ambientais pertinentes que possam afetar a gravidade potencial associada a uma vulnerabilidade de segurança específica.

Produtos afetados e soluções

CVEs Addressed

Product

Affected Versions

Remediated Versions

Link

CVE-2025-41236, CVE-2025-41237, CVE-2025-41238, CVE-2025-41239

VMware ESXi

Versions prior to ESXi 8.0 Update 3f

Version ESXi 8.0 Update 3f or later

Broadcom Support PortalThis hyperlink is taking you to a website outside of Dell Technologies.

CVE-2025-41237

VMware ESXi

Versions prior to ESXi 9.0.0.0100

Version ESXi 9.0.0.0100 or later

Broadcom Support PortalThis hyperlink is taking you to a website outside of Dell Technologies.

 

CVEs Addressed

Product

Affected Versions

Remediated Versions

Link

CVE-2025-41236, CVE-2025-41237, CVE-2025-41238, CVE-2025-41239

VMware ESXi

Versions prior to ESXi 8.0 Update 3f

Version ESXi 8.0 Update 3f or later

Broadcom Support PortalThis hyperlink is taking you to a website outside of Dell Technologies.

CVE-2025-41237

VMware ESXi

Versions prior to ESXi 9.0.0.0100

Version ESXi 9.0.0.0100 or later

Broadcom Support PortalThis hyperlink is taking you to a website outside of Dell Technologies.

 

  • Customers can upgrade the VMware security patches directly from the Broadcom Support Portal prior to the availability of the Dell custom VMware ESXi image.  The expected availability of the Dell custom VMware ESXi image is November 2025. 
  • Please refer to VMSA-2025-0013 for instructions on patch installation. 
  • The Affected Products and Remediation table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.

Histórico de revisão

Revision

Date

Description

1.0

2025-09-24

Initial Release

 

Informações relacionadas

Produtos afetados

VMware ESXi 8.x, VMware ESXi 9.x
Propriedades do artigo
Número do artigo: 000373451
Tipo de artigo: Dell Security Advisory
Último modificado: 24 set. 2025
Encontre as respostas de outros usuários da Dell para suas perguntas.
Serviços de suporte
Verifique se o dispositivo está coberto pelos serviços de suporte.