Skip to the content
The Update Bureau
SQL Server 2022 CU12 SQL Server 2022 CU12 Cumulative update

KB5033663

KB5033663: Cumulative update for SQL Server 2022, CU branch, March 2024. Replication authentication and stronger password verifiers arrive

In short

CU12 brings 51 fixes, makes Microsoft Entra authentication for replication generally available, and adds iterated, salted password verifiers. Queries using SESSION_CONTEXT might return incorrect results or trigger access violation dumps in parallel plans.

Does it affect you? Applies to: SQL Server 2022 instances on Windows or Linux. The package updates only the SQL Server components already installed on the instance; the listed package is x64.

Build
16.0.4115.5
Servicing branch
CU
Restart
Required

For servers on the CU branch: they install cumulative updates, which also bring fixes beyond security. Servers on the GDR branch (security fixes only) get a separate update. Which branch am I on?

What changes

Fixes 40 changes

Analysis Services

3 items
  • Adding or deleting an empty partition on a table with row-level security no longer triggers the described access violation.1
    Applies to Analysis Services on Windows.
  • DAX queries no longer fail with a memory allocation error when the Analysis Services instance still has available memory.2
    Applies to Analysis Services on Windows.
  • Processing with the ProcessAdd command no longer has the described performance degradation and increase in CPU use and execution time.3
    Applies to Analysis Services on Windows.

Master Data Services

2 items
  • Recursive hierarchies can load all levels instead of failing to load some of them.4
    Applies to Master Data Services on Windows.
  • Upgrading Master Data Services models no longer fails when an inappropriate entity name, such as “Entity,” is set.5
    Applies to Master Data Services on Windows.

SQLDiag

  • SQLdiag starts when it reads the default XML configuration file instead of failing with a configuration error.6
    Applies to SQLDiag on Windows.

Backup Restore

  • A VSS restore using Restore with Move no longer restores the wrong file or fails when the .mdf file path ends with a space.7
    Applies to SQL Server on Windows.

DB Management

  • A database file in a database created with DBCC CLONEDATABASE is no longer associated with the wrong filegroup.8
    Applies to all listed platforms.

High Availability and Disaster Recovery

6 items
  • Automatic seeding no longer remains in LIMIT_CONCURRENT_BACKUPS in the described availability group scenario.9
    Applies when adding a database to an availability group created with automatic seeding; applies to all listed platforms.
  • Read-scale availability groups with many databases are prevented from being created, avoiding a later assertion failure.10
    Applies to SQL Server on Windows.
  • Database auditing records the action in the described scenario involving an audit specification created against the instance name and later transactions against the contained availability group listener.11
    Applies to all listed platforms.
  • A distributed availability group's global primary or forwarder can connect to the other availability group's listener after a local failover in a multi-subnet configuration.12
    Applies to SQL Server on Windows.
  • The Availability Databases folder in SQL Server Management Studio shows databases in read-scale availability groups again.13
    Addresses an issue in sys.dm_hadr_database_replica_cluster_states after installing SQL Server 2022 CU10 or later. Applies to Windows.
  • A slow I/O operation no longer causes the described health check timeout issue, which could lead to an unnecessary restart or failover.14
    To apply this fix, turn on trace flag 16301; it is off by default. Tracing is added for the event regardless of the trace flag.

Linux

3 items
  • An incorrect ca-certificates error no longer appears when starting SQL Server on Linux.15
    Removes the error about searching for the first file in /var/opt/mssql/security/ca-certificates.
  • An unreliable network connection during backup to a network share no longer causes the SQL Server instance to stop responding.16
    Applies to SQL Server on Linux.
  • SQL Server starts on Linux kernels 6.7 and later instead of failing to start.17
    Applies to SQL Server on Linux.

Methods to access stored data

  • Running BULK INSERT no longer triggers the described assertion failure.18
    The assertion is in PageFlush.cpp.

PolyBase

3 items
  • Creating or updating statistics no longer encounters the described deadlock involving the blocking Auto Stats feature.19
    Blocking Auto Stats is turned on when using PolyBase. Turning it off might cause a different query plan and execution time because query compilation is no longer blocked by statistics collection.
  • CETAS creates a correct delimited text file when the FIELD_TERMINATOR character is '\t'.20
    Applies to CREATE EXTERNAL TABLE AS SELECT (CETAS).
  • Running Delta table queries no longer requires the sysadmin server role.21
    Applies to all listed platforms.

Programmability

2 items
  • Fixes issues with scalar UDF inlining.22
    The listed bug references are 2936186, 2936204, 2938811, and 2941532; the linked article covers SQL Server 2022 and 2019.
  • A spike in CACHESTORE_PHDR use no longer causes the described out-of-memory issue.23
    Applies to SQL Server on Windows.

Query Execution

2 items
  • An adhoc query that encounters an error while cleaning up during shutdown no longer causes the described process termination issue.24
    The issue involves a query using a binary large object (BLOB).
  • Using sys.dm_exec_query_statistics_xml from multiple concurrent connections no longer causes the described contention.25
    Applies to all listed platforms.

Query Optimizer

5 items
  • INSERT, UPDATE, and DELETE queries no longer return inconsistent results caused by a parallel spool in the plan.26
    Applies to all listed platforms.
  • Aborting a batch mode sort query no longer causes the described access violation.27
    Fixes race conditions involving variables that were not initialized correctly.
  • Queries involving an Adaptive Join (CONCAT) operator no longer trigger the described access violation.28
    The access violation occurs at sqlmin!CBpXteHashJoin::FSeparateHash.
  • Plan cache entries analyzed by Cardinality Estimation feedback can be properly removed from memory.29
    Fixes an issue where references to plan cache entries become dereferenced in memory without allowing the plans to be removed.
  • Cardinality Estimation feedback no longer causes an access violation when a Plan Cache object has an unexpected type.30
    Fixes the cast to an expected object type and attempted access to a field that does not exist.

Replication

6 items
  • Conflict detection and the Replication Merge Agent no longer encounter the described conversion error when converting the generation to int.31
    Fixes the error “Error converting data type bigint to int.”
  • Creating a Subscriber on secondary replicas no longer encounters the listed subscription errors when the distribution database is in an availability group.32
    The issue occurs when using sp_addsubscription.
  • A custom MakeGenerationInterval value works properly when running replmerg.exe.33
    Applies to SQL Server on Windows.
  • After an in-place upgrade of the Publisher instance to SQL Server 2022, sp_helpsubscription returns results so the subscription can be reinitialized.34
    Addresses the issue that caused the error “The Subscription does not exist.”
  • The Distributor agent in peer-to-peer replication no longer fails with a truncation error when the conflicting table's column count changes.35
    Fixes the size of the _$update_bitmap column in dbo.conflict_<owner>_<table>.
  • Adding a remote distributor no longer causes error 18482 in the described case-sensitive collation scenario.36
    The Publisher server name contains lowercase characters and the Distributor server uses a case-sensitive (_CS) collation.

Search

  • The full-text merging process no longer encounters the described word occurrence overflow.37
    Applies to all listed platforms.

SQL Agent

  • The SQL Server Agent no longer terminates with the described self-termination error.38
    Applies to all listed platforms.

Table Index Partition

  • Resuming an index rebuild that includes partitions no longer causes the described access violation dump issue.39
    Applies to SQL Server index rebuilds that are resumed.

Transaction Services

  • Secondary availability group replicas no longer encounter the described non-yielding scheduler issue.40
    Addresses spinlock contention on the Redo Manager.

Improvements 5 changes

Query Execution

  • A mitigation reduces the chance of an assertion failure in complex queries that use large-value data types such as varchar(max).41
    The mitigation does not apply in all situations.

Search

  • Full-text filter usage events provide additional size details for telemetry.42
    Adds min_input_size, max_input_size, min_output_size, and max_output_size fields to the sqlserver.fulltext_filter_usage Extended Event.

SQL OS

2 items
  • Compressed memory dumps use available CPU cores more effectively and improve I/O performance while preventing excessive file cache growth.43
    Adds FILE_FLAG_NO_BUFFERING and dynamic auto-tuning parallelism. Applies to Windows.
  • Creating an Extended Events event_file target with an invalid Azure blob target gives a more specific error message.44
    The message can identify invalid or expired credentials instead of reporting a generic configuration error during initialization.

Storage Management

  • Error 824 includes a link to help with troubleshooting.45
    Adds a link to the MSSQLSERVER_824 error message.

New features 3 changes

Linux

  • SQL Server on Linux gains support for Extensible Key Management.46
    Adds support for the Extensible Key Management (EKM) feature.

Security Infrastructure

  • Password verifiers can use an iterated and salted hash process instead of storing only a SHA-512 hash.47
    Available only in SQL Server 2022 CU12 and later versions.

SQL OS

  • Trace flag 2616 enables the stack signature feature when a dump occurs, helping avoid multiple dumps for the same exception.48
    Adds trace flag 2616.

Known issues

  1. Open Affects: Everyone

    Incorrect behavior of SESSION_CONTEXT in parallel plans

    Queries using SESSION_CONTEXT might return incorrect results or trigger access violation dump files in parallel query plans. This is particularly an issue if the session is reset for reuse.49

    Workaround status No workaround yet

    Microsoft has not published a manual workaround for this issue yet. Monitor release health until a resolving update is available.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2024-03-14
Classification
Updates
Type
Cumulative update
Servicing branch
CU
Restart
Required
Replaces
KB5032679
Replaced by
KB5036343
VersionBuildChannel
2022 16.0.4115.5 General availability

Security

No vulnerabilities are listed for this update.

Downloads (Microsoft Update Catalog)

Package 2022
410.2 MB
sqlserver2022-kb5033663-x64.exe Main update · KB5033663 SHA-1: a58455d6…fe8388

Sources

Updated
Cited passages from Microsoft's official notes (49)
  1. 1. Fixes an access violation that you might encounter when adding or deleting an empty partition with row-level security (RLS) on a table. support.microsoft.com
  2. 2. Fixes an issue in which running Data Analysis Expressions (DAX) queries failed with error "Memory Allocation failure" even though the SQL Server Analysis Services instance still has a lot of available memory. support.microsoft.com
  3. 3. Fixes a performance degradation that might be encountered during the execution of the ProcessAdd command, which causes an increase in CPU usage and execution time. support.microsoft.com
  4. 4. Fixes an issue that might cause a recursive hierarchy to fail to load all levels. support.microsoft.com
  5. 5. Fixes an issue in which an upgrade process in Master Data Services models might fail if you set an inappropriate entity name such as "Entity". support.microsoft.com
  6. 6. Fixes an issue in which the SQLdiag tool doesn't start when trying to read the default XML configuration file. support.microsoft.com
  7. 7. Fixes an issue in which a Volume Shadow Copy Service (VSS) restore process with the Restore with Move feature might restore an incorrect file or fail if the file path for the .mdf file includes a trailing space. support.microsoft.com
  8. 8. Fixes an issue that might cause the database file to be associated with an incorrect filegroup in the clone database created by using DBCC CLONEDATABASE. support.microsoft.com
  9. 9. Fixes an issue in which the automatic seeding operation for a database remains in LIMIT_CONCURRENT_BACKUPS support.microsoft.com
  10. 10. Prevents the creation of read-scale availability groups that have a large number of databases to avoid the subsequent assertion failure support.microsoft.com
  11. 11. Fixes an issue in which the database audit might not record the action when a database audit specification is initially created against the instance name support.microsoft.com
  12. 12. Fixes an issue in which the global primary or forwarder in a distributed availability group can't connect to the listener of the other availability group for a while after the local availability group fails over support.microsoft.com
  13. 13. Fixes an issue that you encounter in sys.dm_hadr_database_replica_cluster_states for read-scale availability groups after you install SQL Server 2022 CU10 or later versions support.microsoft.com
  14. 14. Fixes an issue in which the sp_server_diagnostics stored procedure doesn't respond to the Always On availability group (AG) resource DLL within the HealthCheckTimeout when the I/O takes a long time support.microsoft.com
  15. 15. Removes the following incorrect error that's related to ca-certificates when starting SQL Server on Linux support.microsoft.com
  16. 16. Fixes an issue in which an unreliable network connection causes an unsuccessful status during backup to a network share, which causes the SQL Server instance to stop responding. support.microsoft.com
  17. 17. Fixes an issue in which the SQL Server instance fails to start on Linux kernels 6.7 and later versions. support.microsoft.com
  18. 18. Fixes an assertion failure (Location: "sql\\ntdbms\\storeng\\dfs\\trans\\PageFlush.cpp":1840; Expression: IS_OFF (BUF_LOG_BUFWRITE, buf->bstat) || IS_ON (BUF_DIRTY, buf->bstat) || m_ownerXdes->GetPru ()->IsSuspect ()) that you encounter when running the BULK INSERT statement. support.microsoft.com
  19. 19. Fixes a deadlock issue that you encounter when creating or updating statistics by turning off the blocking Auto Stats feature. support.microsoft.com
  20. 20. Fixes an issue in which the exported delimited text file created by using CREATE EXTERNAL TABLE AS SELECT (CETAS) is incorrect if the FIELD_TERMINATOR character is '\t'. support.microsoft.com
  21. 21. Fixes an issue in which running Delta table queries requires the sysadmin server role. support.microsoft.com
  22. 22. FIX: Scalar UDF Inlining issues in SQL Server 2022 and 2019 (KB4538581) support.microsoft.com
  23. 23. Fixes an out-of-memory (OOM) issue that's caused by spikes in CACHESTORE_PHDR usage. support.microsoft.com
  24. 24. Fixes a potential process termination issue that you might encounter when an adhoc query that uses the binary large object (BLOB) encounters an error and tries to clean up during the query shutdown. support.microsoft.com
  25. 25. Fixes a contention issue that you encounter when using sys.dm_exec_query_statistics_xml from multiple concurrent connections. support.microsoft.com
  26. 26. Fixes inconsistent results that are caused by the parallel spool in the plan for the INSERT, UPDATE, or DELETE query. support.microsoft.com
  27. 27. Fixes race conditions in which certain variables aren't initialized correctly when a batch mode sort query is aborted, which causes an access violation support.microsoft.com
  28. 28. Fixes an access violation exception that you encounter at sqlmin!CBpXteHashJoin::FSeparateHash when you try to run a query that involves an Adaptive Join (CONCAT) operator in the query plan. support.microsoft.com
  29. 29. Fixes an issue that you encounter when references to plan cache entries become dereferenced in memory without allowing the plans to be properly removed from memory. support.microsoft.com
  30. 30. Fixes an access violation that you encounter when a Plan Cache object type differs from what Cardinality Estimation (CE) feedback expects. support.microsoft.com
  31. 31. Fixes the following error that you encounter in conflict detection and in the Replication Merge Agent when converting the generation to int: Error converting data type bigint to int. support.microsoft.com
  32. 32. Fixes the following errors that you encounter when using sp_addsubscription to create the Subscriber on secondary replicas if the distribution database is in an availability group support.microsoft.com
  33. 33. Fixes an issue in which overriding the MakeGenerationInterval parameter that uses a custom value doesn't work properly when you run replmerg.exe. support.microsoft.com
  34. 34. Fixes an issue in which the sp_helpsubscription stored procedure doesn't return any results after an in-place upgrade of the Publisher instance to SQL Server 2022 support.microsoft.com
  35. 35. Fixes an issue in which the size of the _$update_bitmap column of dbo.conflict_<owner>_<table> doesn't get updated with changes in the number of columns of the original conflicting table support.microsoft.com
  36. 36. Fixes an issue in which error 18482 is caused when using sp_adddistributor to add a remote distributor if the Publisher server name contains lowercase characters and the Distributor server has the case-sensitive (_CS) collation. support.microsoft.com
  37. 37. Fixes an overflow issue of the word occurrence that you encounter during the full-text merging process. support.microsoft.com
  38. 38. Fixes an issue that causes the SQL Server Agent to terminate with the following error message support.microsoft.com
  39. 39. Fixes an access violation dump issue that you might encounter when resuming an index rebuild that includes partitions support.microsoft.com
  40. 40. Fixes a non-yielding scheduler issue due to spinlock contention on the Redo Manager on secondary replicas of an availability group. support.microsoft.com
  41. 41. Adds mitigation to avoid an assertion failure (Location: lobss.cpp:707; Expression: 'FALSE' Lob not found for read) that you might encounter when you run a complex query that uses large value data types such as varchar(max). support.microsoft.com
  42. 42. Adds the following fields to the sqlserver.fulltext_filter_usage Extended Event (XEvent) to improve the telemetry reporting for the XEvent support.microsoft.com
  43. 43. Makes the following improvements to the compressed memory dump feature: support.microsoft.com
  44. 44. After applying the improvement, the error will be reported more specifically, such as "due to invalid or expired credentials." support.microsoft.com
  45. 45. Adds a link to error 824 to improve the troubleshooting experience. support.microsoft.com
  46. 46. Adds the support of the Extensible Key Management (EKM) feature for SQL Server on Linux. support.microsoft.com
  47. 47. Adds support for iterated and salted hash password verifiers. This is a more secure process than simply storing the SHA-512 hash of the password. support.microsoft.com
  48. 48. Adds trace flag 2616 to enable the stack signature feature when a dump occurs on a SQL Server instance, which avoids multiple dumps for the same exception. support.microsoft.com
  49. 49. Queries that use the built-in SESSION_CONTEXT function might return incorrect results or trigger access violation (AV) dump files when run in parallel query plans. support.microsoft.com
Checked automatically: 8 of 8 checks passed, 49 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake