Thanks – again – to Michal Kubeček, who  has pointed out that there is still a vulnerability in some VMware (vmmon) code, that is not mitigated by Kernel/Compiler retpoline fixes, as it is written in assembler..   ( See comment on previous article – http://rglinuxtech.com/?p=2277 )

He has provided an appropriate fix for this, at https://github.com/mkubecek/vmware-host-modules/tree/player-14.1.1

Robert Gadsdon.   April 30, 2018.
(updated May 2, to fix missing text..)