Thanks – again – to Michal Kubeček, who has pointed out that there is still a vulnerability in some VMware (vmmon) code, that is not mitigated by Kernel/Compiler retpoline fixes, as it is written in assembler.. ( See comment on previous article – http://rglinuxtech.com/?p=2277 )
He has provided an appropriate fix for this, at https://github.com/mkubecek/vmware-host-modules/tree/player-14.1.1
Robert Gadsdon. April 30, 2018.
(updated May 2, to fix missing text..)