Skip to content
OpenAdvisories
High 1 exploited CVE ELSA-2025-17428 1 CVE

Important: open-vm-tools security update (Oracle Linux 9)

Published Oct 7, 2025 · Updated Oct 7, 2025

Ecosystem: Oracle Linux

Summary

[12.5.0-1.0.1.2]
- Fix spaces in vmware udev rule for scsi devices [Orabug: 24461968]
- Fix vmware udev rule in 99-vmware-scsi-timeout.rules file. [Orabug: 22815019]
- Increase timeout for scsi devices on VMWare guests by adding a udev rule. [Orabug: 21819156]

[12.5.0-1.el9_6.2]
- ovt-Address-CVE-2025-41244.patch [RHEL-117390]
- Resolves: RHEL-117390
([CISA Major Incident] CVE-2025-41244 open-vm-tools: Local privilege escalation in open-vm-tools [rhel-9.6.z])

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 9 open-vm-tools 0:12.5.0-1.0.1.el9_6.2
Oracle Linux · 9 open-vm-tools-desktop 0:12.5.0-1.0.1.el9_6.2
Oracle Linux · 9 open-vm-tools-salt-minion 0:12.5.0-1.0.1.el9_6.2
Oracle Linux · 9 open-vm-tools-sdmp 0:12.5.0-1.0.1.el9_6.2
Oracle Linux · 9 open-vm-tools-test 0:12.5.0-1.0.1.el9_6.2

Vulnerabilities 1

  • High 7.8
    CVE-2025-41244 Exploited Public exploit EPSS 16%

    VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)

    VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may explo…

    VMware VMware Aria Operations VMware Telco Cloud Platform VMware Cloud Foundation Debian Ubuntu Azure Linux
    KEV Oct 30, 2025