VMware Carbon Black creates BSOD in Windows (August 2022)

Windows[German]VMware users running Carbon Black Cloud Sensor version – were greeted with blue screens on their Windows systems as of August 23, 2022. The cause is an update for Carbon Black Sensor, which is responsible for this behavior.


I became aware of this issue last night with the colleagues at Bleeping Computer – they addressed it in this article and on Twitter

VMware Carbon Black BSOD

The cause of the issue is a ruleset implemented in Carbon Black Cloud Sensor – that causes Windows systems to crash with a BlueScreen. Affected systems include Microsoft Windows 10 x64, Windows Server 2012 R2 x64, Windows Server 2016 x64 and Windows Server 2019 x64. The affected systems are running Carbon Black Sensor and display the "PFN_LIST_CORRUPT" error, writes a user who investigated. The machines then fail to boot. VMware confirmed the issue to BleepingComputer:

"VMware Carbon Black is aware of an issue affecting a limited number of customer endpoints, where certain older sensor versions were impacted by an update of our behavioral preventative capabilities. The issue has been identified and corrected, and VMware Carbon Black is working with impacted customers."

Anyone affected by this issue?

Cookies helps to fund this blog: Cookie settings

This entry was posted in issue, Windows and tagged , . Bookmark the permalink.

Leave a Reply

Your email address will not be published. Required fields are marked *