[German]VMware users running Carbon Black Cloud Sensor version 22.214.171.1249 – 126.96.36.1998 were greeted with blue screens on their Windows systems as of August 23, 2022. The cause is an update for Carbon Black Sensor 188.8.131.523, which is responsible for this behavior.
The cause of the issue is a ruleset implemented in Carbon Black Cloud Sensor 184.108.40.2069 – 220.127.116.118 that causes Windows systems to crash with a BlueScreen. Affected systems include Microsoft Windows 10 x64, Windows Server 2012 R2 x64, Windows Server 2016 x64 and Windows Server 2019 x64. The affected systems are running Carbon Black Sensor 18.104.22.1683 and display the "PFN_LIST_CORRUPT" error, writes a user who investigated. The machines then fail to boot. VMware confirmed the issue to BleepingComputer:
"VMware Carbon Black is aware of an issue affecting a limited number of customer endpoints, where certain older sensor versions were impacted by an update of our behavioral preventative capabilities. The issue has been identified and corrected, and VMware Carbon Black is working with impacted customers."
Anyone affected by this issue?
Cookies helps to fund this blog: Cookie settings