In order to test for CVE-2018-3620 and CVE-2018-3646, you should kldload vmm.

If vmm is not loaded you would get an incorrect STATUS telling you that the system is vulnerable and that the kernel needs updating.