PSOD with vTPM VM's configured

Products

• VMware vSphere ESXi

Issue/Introduction

• ESXi has VM’s that have vTPM configured. 
• ESXi host may experience a Purple Screen of Death (PSOD) with backtrace similar to:

#0 Heap_Free (heap=0x############, mem=0x############) at bora/vmkernel/main/heap.c:4267
#1 0x00004200255daa80 in World_Free (mem=<optimized out>, world=<optimized out>) at bora/vmkernel/private/world.h:726
#2 UserSemaFDDestroy (sema=<optimized out>) at bora/vmkernel/user/userSemaFD.c:136
#3 0x0000000000000000 in ?? ()

• The backtrace may also mention:
  Crash at 2025-01-01T00:02:01.039Z on CPU ## running world ####### - tpm2emu

• Running ESXi version before 8.0U3 (build 24022510)

Environment

8.0.2

Cause

A race condition occurred between tpm2emu and vmx . A PSOD occurs when cleanup up of tpm2emu attempts to destroy the UserSemaFD, as the memory allocated for it comes from vmx's heap.

 

Resolution

This issue is resolved in ESXi 8 Update 3, Build Number:24022510