[German]VMware users running Carbon Black Cloud Sensor version 3.6.0.1979 – 3.8.0.398 were greeted with blue screens on their Windows systems as of August 23, 2022. The cause is an update for Carbon Black Sensor 3.7.0.1253, which is responsible for this behavior.
Advertising
I became aware of this issue last night with the colleagues at Bleeping Computer – they addressed it in this article and on Twitter.
The cause of the issue is a ruleset implemented in Carbon Black Cloud Sensor 3.6.0.1979 – 3.8.0.398 that causes Windows systems to crash with a BlueScreen. Affected systems include Microsoft Windows 10 x64, Windows Server 2012 R2 x64, Windows Server 2016 x64 and Windows Server 2019 x64. The affected systems are running Carbon Black Sensor 3.7.0.1253 and display the "PFN_LIST_CORRUPT" error, writes a user who investigated. The machines then fail to boot. VMware confirmed the issue to BleepingComputer:
"VMware Carbon Black is aware of an issue affecting a limited number of customer endpoints, where certain older sensor versions were impacted by an update of our behavioral preventative capabilities. The issue has been identified and corrected, and VMware Carbon Black is working with impacted customers."
Anyone affected by this issue?
