-
- Expert
- Posts: 104
- Liked: 29 times
- Joined: Mar 16, 2023 5:47 pm
- Contact:
Re: vSphere 8.0 U2 support in light of VMSA-2023-0023 CVSSv3 base score of 9.8
Looks like the issue has been resolved in the latest ESXi 8.0.2b
PR 3316967: Changed Block Tracking (CBT) might not work as expected on a hot extended virtual disk
In vSphere 8.0 Update 2, to optimize the open and close process of virtual disks during hot extension, the disk remains open during hot extend operations. Due to this change, incremental backup of virtual disks with CBT enabled might be incomplete, because the CBT in-memory bitmap does not resize, and CBT cannot record the changes to the extended disk block. As a result, when you try to restore a VM from an incremental backup of virtual disks with CBT, the VM might fail to start.
This issue is resolved in this release.
https://docs.vmware.com/en/VMware-vSphe ... index.html
PR 3316967: Changed Block Tracking (CBT) might not work as expected on a hot extended virtual disk
In vSphere 8.0 Update 2, to optimize the open and close process of virtual disks during hot extension, the disk remains open during hot extend operations. Due to this change, incremental backup of virtual disks with CBT enabled might be incomplete, because the CBT in-memory bitmap does not resize, and CBT cannot record the changes to the extended disk block. As a result, when you try to restore a VM from an incremental backup of virtual disks with CBT, the VM might fail to start.
This issue is resolved in this release.
https://docs.vmware.com/en/VMware-vSphe ... index.html
-
- Service Provider
- Posts: 211
- Liked: 46 times
- Joined: Oct 28, 2010 10:55 pm
- Full Name: Ashley Watson
- Contact:
Re: vSphere 8.0 U2 support in light of VMSA-2023-0023 CVSSv3 base score of 9.8
has anyone been brave enough to update vcentre and esxi to 8update2b and verified Veeam functionality? (If not I might slam it on one of our labs).
-
- Veteran
- Posts: 536
- Liked: 111 times
- Joined: Sep 17, 2017 3:20 am
- Full Name: Franc
- Contact:
Re: vSphere 8.0 U2 support in light of VMSA-2023-0023 CVSSv3 base score of 9.8
I updated vCenter in my lab. During the update to vcenter I received the following error 'Installation Failed: pre-install failed for vpxd:Expand' and the update failed. I had the option to resume the update. After that, the update was successful and vcenter is functional. However, I have my doubts that vcenter was fully updated due to the error. I opened a case for this with VMware support. Didn’t update ESXi yet.
-
- Expert
- Posts: 104
- Liked: 29 times
- Joined: Mar 16, 2023 5:47 pm
- Contact:
-
- Expert
- Posts: 104
- Liked: 29 times
- Joined: Mar 16, 2023 5:47 pm
- Contact:
Re: vSphere 8.0 U2 support in light of VMSA-2023-0023 CVSSv3 base score of 9.8
Successful upgrade of both vCenter and ESXi hosts to 8.0.2b. Veeam 12.1 latest build is working fine. I have run a number of test backups and restores, no issues. We'll give it a week or two before I pass final judgment
-
- Veteran
- Posts: 292
- Liked: 25 times
- Joined: Mar 23, 2015 8:30 am
- Contact:
Re: vSphere 8.0 U2 support in light of VMSA-2023-0023 CVSSv3 base score of 9.8
... that sounds greatSuccessful upgrade of both vCenter and ESXi hosts to 8.0.2b. Veeam 12.1 latest build is working fine. I have run a number of test backups and restores, no issues. We'll give it a week or two before I pass final judgment
-
- Veteran
- Posts: 536
- Liked: 111 times
- Joined: Sep 17, 2017 3:20 am
- Full Name: Franc
- Contact:
Re: vSphere 8.0 U2 support in light of VMSA-2023-0023 CVSSv3 base score of 9.8
vmWare confirmed the update of vCenter was completed successfully even after getting the mentioned error message. Also updated the first ESXi hosts without issue.FrancWest wrote: ↑Mar 03, 2024 11:54 pm I updated vCenter in my lab. During the update to vcenter I received the following error 'Installation Failed: pre-install failed for vpxd:Expand' and the update failed. I had the option to resume the update. After that, the update was successful and vcenter is functional. However, I have my doubts that vcenter was fully updated due to the error. I opened a case for this with VMware support. Didn’t update ESXi yet.
-
- Enthusiast
- Posts: 85
- Liked: 2 times
- Joined: Feb 05, 2010 4:12 pm
- Full Name: Zeller Werner
- Contact:
Re: vSphere 8.0 U2 support in light of VMSA-2023-0023 CVSSv3 base score of 9.8
Hi all, Hi Pirx,
thanks, i am waiting until esx 8.02b from HPE will arrive.
Best regards
Novell2
thanks, i am waiting until esx 8.02b from HPE will arrive.
Best regards
Novell2
-
- Veteran
- Posts: 536
- Liked: 111 times
- Joined: Sep 17, 2017 3:20 am
- Full Name: Franc
- Contact:
Re: vSphere 8.0 U2 support in light of VMSA-2023-0023 CVSSv3 base score of 9.8
No need to wait for the HPE iso, you can simply install the VMware patches. The HPE iso only contains drivers and HPE tools, the vSphere install is the same.
-
- Influencer
- Posts: 19
- Liked: never
- Joined: Jan 25, 2011 8:05 am
- Contact:
Re: vSphere 8.0 U2 support in light of VMSA-2023-0023 CVSSv3 base score of 9.8
https://www.veeam.com/kb2443
looks like this was never updated in light of the cbt bug? as it was last modified in december 2023? it still the initial guidance for u2 that no new features were supported.
What is the official word now from veeam ? I see lots of people asking if anyone has updated yet. Ironically i see we are back to the original question i started this thread about
There are critical vulnerabilities right now. What is the official veeam guidance right now? Should we just use the security patches for u1. Or is u2b now fully supported? I guess you still need time to validate if the cbt problem is actually fixed or not ?
looks like this was never updated in light of the cbt bug? as it was last modified in december 2023? it still the initial guidance for u2 that no new features were supported.
What is the official word now from veeam ? I see lots of people asking if anyone has updated yet. Ironically i see we are back to the original question i started this thread about

There are critical vulnerabilities right now. What is the official veeam guidance right now? Should we just use the security patches for u1. Or is u2b now fully supported? I guess you still need time to validate if the cbt problem is actually fixed or not ?
-
- Enthusiast
- Posts: 37
- Liked: 8 times
- Joined: Feb 27, 2017 7:47 am
- Full Name: William R.
- Contact:
Re: vSphere 8.0 U2 support in light of VMSA-2023-0023 CVSSv3 base score of 9.8
Can we safely upgrade our vCenter Server to version 8.0 Update 2b(8.0.2.00200) and our ESXi to version 8.0 Update 2b(23305546) with Veeam 12.1.0.2131?
-
- Enthusiast
- Posts: 75
- Liked: 32 times
- Joined: Jan 14, 2022 9:16 am
- Full Name: Daniel Artzen
- Location: Germany
- Contact:
Re: vSphere 8.0 U2 support in light of VMSA-2023-0023 CVSSv3 base score of 9.8
You can either update to 8U1d or to 8U2b. The CBT-Bug is officially listed as fixed in the release notes for 8U2b. Both versions have the fixes for the new vulnerabilities. The only thing you should not do if you are on 8U1c is update to 8U1d and then upgrade to 8U2 (without b) as that is not supported. But this is prominently displayed at the beginning of the release notes for 8U1d.
-
- Enthusiast
- Posts: 37
- Liked: 8 times
- Joined: Feb 27, 2017 7:47 am
- Full Name: William R.
- Contact:
Re: vSphere 8.0 U2 support in light of VMSA-2023-0023 CVSSv3 base score of 9.8
Thanks Daniel for your help.
Has Veeam tested this 8U2b version and can confirm that backups are now fully functional without adding the registry key?
Has Veeam tested this 8U2b version and can confirm that backups are now fully functional without adding the registry key?
-
- Chief Product Officer
- Posts: 31959
- Liked: 7431 times
- Joined: Jan 01, 2006 1:01 am
- Location: Baar, Switzerland
- Contact:
Re: vSphere 8.0 U2 support in light of VMSA-2023-0023 CVSSv3 base score of 9.8
Yes, our autotest shows that the bug was fixed. QA wanted to look at this closer next week before announcing (the required team was busy with the last 11a patch).
For now please assume that performing the second step is still required. It is yet unknown if this patch attempts to do anything about CBT map of VMs which have had their disks resized while the bug existed, like resetting it automatically.
For now please assume that performing the second step is still required. It is yet unknown if this patch attempts to do anything about CBT map of VMs which have had their disks resized while the bug existed, like resetting it automatically.
-
- Influencer
- Posts: 19
- Liked: never
- Joined: Jan 25, 2011 8:05 am
- Contact:
Re: vSphere 8.0 U2 support in light of VMSA-2023-0023 CVSSv3 base score of 9.8
hallo Gostev
any eta ? have the team been able to work on it this week ?
many thanks
neil
any eta ? have the team been able to work on it this week ?
many thanks
neil
-
- Veeam Software
- Posts: 78
- Liked: 48 times
- Joined: Feb 19, 2019 3:08 pm
- Full Name: Andy Sturniolo
- Contact:
Re: vSphere 8.0 U2 support in light of VMSA-2023-0023 CVSSv3 base score of 9.8
Our QA teams are currently taking a closer look. We will share an update as soon as we have additional information available.
-
- Veeam Software
- Posts: 78
- Liked: 48 times
- Joined: Feb 19, 2019 3:08 pm
- Full Name: Andy Sturniolo
- Contact:
Re: vSphere 8.0 U2 support in light of VMSA-2023-0023 CVSSv3 base score of 9.8
During our investigation and various testing scenarios, we did not encounter any data corruption issues in this particular scenario with version 8.0.2b.
In cases where a VM's disk was previously resized, the CBT map may remain invalid. However, with the ESXi update to version 8.0.2b and subsequent VM migration to another host as part of the update process, the CBT will be automatically reset. Therefore, there is no need for manual CBT reset for VMs with invalid CBT maps if updating the infrastructure to 8.0.2b.
In cases where a VM's disk was previously resized, the CBT map may remain invalid. However, with the ESXi update to version 8.0.2b and subsequent VM migration to another host as part of the update process, the CBT will be automatically reset. Therefore, there is no need for manual CBT reset for VMs with invalid CBT maps if updating the infrastructure to 8.0.2b.
-
- Veeam Legend
- Posts: 418
- Liked: 243 times
- Joined: Apr 11, 2023 1:18 pm
- Full Name: Tyler Jurgens
- Contact:
Re: vSphere 8.0 U2 support in light of VMSA-2023-0023 CVSSv3 base score of 9.8
Thanks Andy, that's great information. I guess there is still a scenario of a single host - where VMs are shut down to upgrade ESXi - the CBT map would not be reset in that scenario. Wouldn't expect that often, but would be a good case to point out.
Tyler Jurgens
Veeam Legend x3 | vExpert ** | VMCE | VCP 2020 | Tanzu Vanguard | VUG Canada Leader | VMUG Calgary Leader
Blog: https://explosive.cloud
Twitter: @Tyler_Jurgens BlueSky: @explosive.cloud
Veeam Legend x3 | vExpert ** | VMCE | VCP 2020 | Tanzu Vanguard | VUG Canada Leader | VMUG Calgary Leader
Blog: https://explosive.cloud
Twitter: @Tyler_Jurgens BlueSky: @explosive.cloud
-
- Expert
- Posts: 219
- Liked: 63 times
- Joined: Feb 18, 2013 10:45 am
- Full Name: Stan G
- Contact:
Re: vSphere 8.0 U2 support in light of VMSA-2023-0023 CVSSv3 base score of 9.8
Important addendum for setups where VM's are not migrated as part of the update process.
-
- Novice
- Posts: 6
- Liked: 1 time
- Joined: Jul 22, 2009 6:42 pm
- Full Name: Christopher A. Olsztyn
- Contact:
Re: vSphere 8.0 U2 support in light of VMSA-2023-0023 CVSSv3 base score of 9.8
Sturniolo wrote: ↑Mar 19, 2024 11:56 am by Sturniolo » Tue Mar 19, 2024 6:56 am
However, with the ESXi update to version 8.0.2b and subsequent VM migration to another host as part of the update process, the CBT will be automatically reset. Therefore, there is no need for manual CBT reset for VMs with invalid CBT maps if updating the infrastructure to 8.0.2b.
Question, when you say "VM migration" are we talking a regular VMotion or an SVMotion to migrate to a new storage volume?
Thanks
-
- Veeam Software
- Posts: 78
- Liked: 48 times
- Joined: Feb 19, 2019 3:08 pm
- Full Name: Andy Sturniolo
- Contact:
Re: vSphere 8.0 U2 support in light of VMSA-2023-0023 CVSSv3 base score of 9.8
Some additional information....
Our QA team has tested this behavior thoroughly and can confirm that powering off, suspending or performing a vMotion of a VM helps to prevent corruption during backup or replication jobs. But at least one of the these actions will happen for each VM on the host when you update it to Update 2b regardless of your deployment scenario (standalone host or cluster).
The hint is in the Update 2b release notes:
Our QA team has tested this behavior thoroughly and can confirm that powering off, suspending or performing a vMotion of a VM helps to prevent corruption during backup or replication jobs. But at least one of the these actions will happen for each VM on the host when you update it to Update 2b regardless of your deployment scenario (standalone host or cluster).
The hint is in the Update 2b release notes:
So the root cause of corruption was not CBT itself but only the invalid in-memory bitmap that gets purged by any of the above-mentioned actions.In vSphere 8.0 Update 2, to optimize the open and close process of virtual disks during hot extension, the disk remains open during hot extend operations. Due to this change, incremental backup of virtual disks with CBT enabled might be incomplete, because the CBT in-memory bitmap does not resize, and CBT cannot record the changes to the extended disk block. As a result, when you try to restore a VM from an incremental backup of virtual disks with CBT, the VM might fail to start.
-
- Novice
- Posts: 6
- Liked: 1 time
- Joined: Jul 22, 2009 6:42 pm
- Full Name: Christopher A. Olsztyn
- Contact:
Re: vSphere 8.0 U2 support in light of VMSA-2023-0023 CVSSv3 base score of 9.8
Super helpful. Thank you!
-
- Influencer
- Posts: 17
- Liked: never
- Joined: Apr 12, 2023 7:10 pm
- Contact:
Re: vSphere 8.0 U2 support in light of VMSA-2023-0023 CVSSv3 base score of 9.8
We had installed 8.0.2 a few month ago.
So I done an active full for all backups, i think now we are safe correct?
What is to do with our backup copy? Do i need also do an active full?
Thanks
So I done an active full for all backups, i think now we are safe correct?
What is to do with our backup copy? Do i need also do an active full?
Thanks
-
- Veeam Legend
- Posts: 133
- Liked: 37 times
- Joined: Sep 11, 2012 12:00 pm
- Full Name: Shane Williford
- Location: Missouri, USA
- Contact:
Re: vSphere 8.0 U2 support in light of VMSA-2023-0023 CVSSv3 base score of 9.8
@iop87 - I don't think you need to do anything. The issue was VMware-related, not Veeam.
Shane Williford
Systems Architect
Veeam Legend | Veeam Architect (VMCA) | VUG KC Leader
VMware VCAP/VCP | VMware vExpert 2011-22
Twitter: @coolsport00
Systems Architect
Veeam Legend | Veeam Architect (VMCA) | VUG KC Leader
VMware VCAP/VCP | VMware vExpert 2011-22
Twitter: @coolsport00
-
- Veeam Software
- Posts: 78
- Liked: 48 times
- Joined: Feb 19, 2019 3:08 pm
- Full Name: Andy Sturniolo
- Contact:
Re: vSphere 8.0 U2 support in light of VMSA-2023-0023 CVSSv3 base score of 9.8
Correct… Nothing further required.
-
- Influencer
- Posts: 17
- Liked: never
- Joined: Apr 12, 2023 7:10 pm
- Contact:
Re: vSphere 8.0 U2 support in light of VMSA-2023-0023 CVSSv3 base score of 9.8
We have resized hard disks online and have not made any full backups since then, only incrementals.
Now we have made extra manual full backups because our incremental backups could be corrupt or am I misunderstanding something completely?
The open question now is what about our Veeam backup copys?
Now we have made extra manual full backups because our incremental backups could be corrupt or am I misunderstanding something completely?
The open question now is what about our Veeam backup copys?
-
- Influencer
- Posts: 17
- Liked: never
- Joined: Apr 12, 2023 7:10 pm
- Contact:
Re: vSphere 8.0 U2 support in light of VMSA-2023-0023 CVSSv3 base score of 9.8
Ou, my question relates to the Changed Block Tracking (CBT) topic.
-
- Influencer
- Posts: 17
- Liked: never
- Joined: Apr 12, 2023 7:10 pm
- Contact:
Re: vSphere 8.0 U2 support in light of VMSA-2023-0023 CVSSv3 base score of 9.8
Question again: For the cbt issue do we need do also an active full for the backup copys?
-
- Service Provider
- Posts: 93
- Liked: 23 times
- Joined: Sep 24, 2020 2:14 pm
- Contact:
Re: vSphere 8.0 U2 support in light of VMSA-2023-0023 CVSSv3 base score of 9.8
@iop87
yes. If you do a syntetic or incremental forever you alrady have a broken backup chain and this needs to be corrected by starting a fresh chain with a full.
yes. If you do a syntetic or incremental forever you alrady have a broken backup chain and this needs to be corrected by starting a fresh chain with a full.
-
- Veteran
- Posts: 536
- Liked: 111 times
- Joined: Sep 17, 2017 3:20 am
- Full Name: Franc
- Contact:
Re: vSphere 8.0 U2 support in light of VMSA-2023-0023 CVSSv3 base score of 9.8
You don’t need to do active fulls for backup copy jobs, only for the primary job. Backup copy jobs transfers all changed blocks. So after an active full on the primary backup jobs, the corrected blocks are in there and are copied over by the copy jobs.
Who is online
Users browsing this forum: Amarokada, Bing [Bot] and 48 guests