Linux · Security advisory · October 8, 2025

RLSA-2025:17429: open-vm-tools security update

RLSA-2025:17429, released October 8, 2025, fixes 1 CVE in open-vm-tools (version 0:12.5.0-1.el10_0.1). One of them is being exploited (CVE-2025-41244); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
1
None rated Critical
Exploited
1
CVE-2025-41244
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0863
95th percentile

Fixed package versions

ProductReleaseFixed in
open-vm-toolsrocky 100:12.5.0-1.el10_0.1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2025-41244 open-vm-tools: VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor w... 7.8 0.0863 KEVExploited
Showing 1 to 1 of 1 1