Are Azure VMware Solution (AV36) patched for VMSA-2024-0013 vulnerability?

Question

Hello Team,

We deployed AVS cluster for a customer with AV36 nodes in Southeast Asia region.

Customer would like to confirm if the AVS SDDC deployment is protected against VMSA-2024-0013 vulnerabilities reported in VMware article:

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505

We raised ticket via our CSP support channel but they ticket was rejected since it is not a break fix issue.

How do we confirm this?

~ Ravi Kumar S

Answer 1

@Ravi Kumar Shanker

How often is the VMware solution software (ESXi, vCenter Server, NSX) patched, updated, or upgraded in the Azure VMware Solution private cloud?

You're notified through Azure Service Health that includes the timeline of the upgrade. This notification also provides details on the upgraded component, its effect on workloads, private cloud access, and other Azure services. You can reschedule an upgrade as needed.

Microsoft tests a critical security patch as soon as it becomes available from VMware.

Let me know if that answers your question, if you still have questions please let me know and I can work with our service team to confirm.

---

If you still have questions, please let us know in the "comments" and we would be happy to help you. Comment is the fastest way of notifying the experts.

If the answer has been helpful, we appreciate hearing from you and would love to help others who may have the same question. Accepting answers helps increase visibility of this question for other members of the Microsoft Q&A community.

Thank you for helping to improve Microsoft Q&A!