Amazon Linux 2023 Security Advisory: ALAS2023-2025-1226
Advisory Released Date: 2025-10-14
Advisory Updated Date: 2025-10-14
Severity:
Important
Issue Overview:
VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM. (CVE-2025-41244)
Affected Packages:
open-vm-tools
Issue Correction:
Run dnf update open-vm-tools --releasever 2023.9.20251014 or dnf update --advisory ALAS2023-2025-1226 --releasever 2023.9.20251014 to update your system.
More information on how to update your system can be found on this page: Amazon Linux 2023 documentation
New Packages:
aarch64:
open-vm-tools-sdmp-debuginfo-12.3.0-1.amzn2023.0.5.aarch64
open-vm-tools-test-12.3.0-1.amzn2023.0.5.aarch64
open-vm-tools-test-debuginfo-12.3.0-1.amzn2023.0.5.aarch64
open-vm-tools-sdmp-12.3.0-1.amzn2023.0.5.aarch64
open-vm-tools-desktop-debuginfo-12.3.0-1.amzn2023.0.5.aarch64
open-vm-tools-desktop-12.3.0-1.amzn2023.0.5.aarch64
open-vm-tools-debugsource-12.3.0-1.amzn2023.0.5.aarch64
open-vm-tools-devel-12.3.0-1.amzn2023.0.5.aarch64
open-vm-tools-debuginfo-12.3.0-1.amzn2023.0.5.aarch64
open-vm-tools-12.3.0-1.amzn2023.0.5.aarch64
src:
open-vm-tools-12.3.0-1.amzn2023.0.5.src
x86_64:
open-vm-tools-salt-minion-12.3.0-1.amzn2023.0.5.x86_64
open-vm-tools-test-debuginfo-12.3.0-1.amzn2023.0.5.x86_64
open-vm-tools-desktop-12.3.0-1.amzn2023.0.5.x86_64
open-vm-tools-sdmp-debuginfo-12.3.0-1.amzn2023.0.5.x86_64
open-vm-tools-devel-12.3.0-1.amzn2023.0.5.x86_64
open-vm-tools-desktop-debuginfo-12.3.0-1.amzn2023.0.5.x86_64
open-vm-tools-sdmp-12.3.0-1.amzn2023.0.5.x86_64
open-vm-tools-test-12.3.0-1.amzn2023.0.5.x86_64
open-vm-tools-debugsource-12.3.0-1.amzn2023.0.5.x86_64
open-vm-tools-debuginfo-12.3.0-1.amzn2023.0.5.x86_64
open-vm-tools-12.3.0-1.amzn2023.0.5.x86_64