Wind River Support Network

HomeDefectsLIN1023-15500

Acknowledged

LIN1023-15500 : Security Advisory - open-vm-tools - CVE-2025-41244

Created: Sep 29, 2025 Updated: Oct 10, 2025

Found In Version: 10.23.30.1

Severity: Standard

Applicable for: Wind River Linux LTS 23

Component/s: Userspace

Description

VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability.\xa0A malicious local actor with non-administrative privileges having access to a VM with VMware Tools\xa0installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.