VMware Telco Cloud response to VMSA-2025-0004 (CVE-2025-22224, CVE-2025-22225, CVE-2025-22226)

Products

• VMware Telco Cloud Infrastructure
• VMware Telco Cloud Infrastructure - Cloud Director Edition
• VMware Telco Cloud Infrastructure - OpenStack Edition
• VMware Telco Cloud Platform
• VMware Telco Cloud Platform - 5G Edition
• VMware Telco Cloud Platform Advanced
• VMware Telco Cloud Platform Essentials
• VMware Telco Cloud Platform Essentials for RAN
• VMware Telco Cloud Platform RAN
• VMware Telco Cloud Platform Standard MANO
• VMware vSphere ESXi

Issue/Introduction

In order to remediate VMSA-2025-0004 on VMware Telco Cloud products, follow the steps in the Resolution section

Environment

Impacted VMware Telco Cloud components

VMware Telco Cloud Platform (TCP):

• TCP 5.0 - ESXi 8.0U3 
• TCP 4.0.1 - ESXi 8.0U2b 
• TCP 4.0 - ESXi 8.0U2b 
• TCP 3.0 - ESXi 8.0b
• TCP 2.7 - ESXi 7.0U3g 
• TCP 2.5 - ESXi 7.0U3f 
• TCP 2.0 - ESXi 7.0U1a

VMware Telco Cloud Infrastructure (TCI):

• TCI 3.0 - ESXi 8.0U1a 
• TCI 2.7 - ESXi 7.0U3m 
• TCI 2.5 - ESXi 7.0U3g 
• TCI 2.2 - ESXi 7.0U3c

Resolution

Patch Availability for VMware Telco Cloud Platform / Telco Cloud Infrastructure

ESXi Version	Patch Identifier	TCP / TCI Version	Link	Notes
ESXi 7.0U3s	7.0.3.0-24585291	TCP 2.5, 2.7 / TCI 2.2, 2.5, 2.7	ESXi70U3s-24585291	For unlisted TCP/TCI versions or ESXi versions under extended support, please contact VMware support for upgrade, mitigation, and migration guidance.
ESXi 8.0U2d	8.0.2-24585300	TCP 4.0, 4.0.1	ESXi80U2d-24585300
ESXi 8.0U3d	8.0.3-24585383	TCP 5.0	ESXi80U3d-24585383