Carbon Black Cloud : BSOD after VMware Tools version 12.2.0+ upgrade

Products

• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

• BSOD after upgrade to VMware Tools 12.2.0 Build 21223074 
• Analysis of dump file notes image name ctifile.sys

  IMAGE_NAME: ctifile.sys

• Within the stack from dump file

  (Guest Introspection Network Driver) vnetWFP+0x30bd

Environment

• Carbon Black Cloud Console: All Versions
• Carbon Black Cloud Sensor: 3.8.x.x
• Microsoft Windows: All Versions

Cause

Issue is being tracked and worked on via DSEN-23909 

Resolution

There are 3 work arounds at the moment prior to the release for 3.9 MR2 sensor version will implement the fix for this issue

1. Downgrade VMware Tools to 12.1.5
2. Install VMware Tools "Typical
3. Install VMware Tools with "Custom" Install option and uncheck NSX component from list

Additional Information

Engineering team has identified this as a known issue. It is tracked under DSEN-23909 and is expected to be be fixed in 3.9 MR2.
Actual release date is not yet available but tentative release date is mid June 2023