DSA-2025-355: Security Update for Dell Custom VMware ESXi vulnerabilities

摘要: Dell Custom VMware ESXi remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.

本文适用于 本文不适用于 本文并非针对某种特定的产品。 本文并非包含所有产品版本。

影响

Critical

详情

Third-party Component

CVEs

More Information

VMXNET3 virtual network adapter

CVE-2025-41236

VMSA-2025-0013This hyperlink is taking you to a website outside of Dell Technologies.

Virtual Machine Communication Interface (VMCI)

CVE-2025-41237

VMSA-2025-0013This hyperlink is taking you to a website outside of Dell Technologies.

ParaVirtualized SCSI (PVSCSI)

CVE-2025-41238

VMSA-2025-0013This hyperlink is taking you to a website outside of Dell Technologies.

vSockets

CVE-2025-41239

VMSA-2025-0013This hyperlink is taking you to a website outside of Dell Technologies.

 

Dell Technologies 建议所有客户考虑 CVSS 基本分数以及任何相关的时间和环境分数,这可能会影响与特定安全漏洞相关的潜在严重程度。

受影响的产品和补救措施

CVEs Addressed

Product

Affected Versions

Remediated Versions

Link

CVE-2025-41236, CVE-2025-41237, CVE-2025-41238, CVE-2025-41239

VMware ESXi

Versions prior to ESXi 8.0 Update 3f

Version ESXi 8.0 Update 3f or later

Broadcom Support PortalThis hyperlink is taking you to a website outside of Dell Technologies.

CVE-2025-41237

VMware ESXi

Versions prior to ESXi 9.0.0.0100

Version ESXi 9.0.0.0100 or later

Broadcom Support PortalThis hyperlink is taking you to a website outside of Dell Technologies.

 

CVEs Addressed

Product

Affected Versions

Remediated Versions

Link

CVE-2025-41236, CVE-2025-41237, CVE-2025-41238, CVE-2025-41239

VMware ESXi

Versions prior to ESXi 8.0 Update 3f

Version ESXi 8.0 Update 3f or later

Broadcom Support PortalThis hyperlink is taking you to a website outside of Dell Technologies.

CVE-2025-41237

VMware ESXi

Versions prior to ESXi 9.0.0.0100

Version ESXi 9.0.0.0100 or later

Broadcom Support PortalThis hyperlink is taking you to a website outside of Dell Technologies.

 

  • Customers can upgrade the VMware security patches directly from the Broadcom Support Portal prior to the availability of the Dell custom VMware ESXi image.  The expected availability of the Dell custom VMware ESXi image is November 2025. 
  • Please refer to VMSA-2025-0013 for instructions on patch installation. 
  • The Affected Products and Remediation table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.

修订历史记录

Revision

Date

Description

1.0

2025-09-24

Initial Release

 

相关信息

受影响的产品

VMware ESXi 8.x, VMware ESXi 9.x
文章属性
文章编号: 000373451
文章类型: Dell Security Advisory
上次修改时间: 24 9月 2025
从其他戴尔用户那里查找问题的答案
支持服务
检查您的设备是否在支持服务涵盖的范围内。