Skip to the content
The Update Bureau
Windows Server 2022 Windows Server 2022 Out-of-band update
Out-of-band

KB5037422

KB5037422: Cumulative update for Windows Server, version 2022, March 2024. LSASS memory leak on domain controllers addressed

In short

Addresses an LSASS memory leak on domain controllers that could cause the service to stop responding and trigger unexpected restarts.

Does it affect you? Applies to: Devices running Windows Server 2022. The LSASS issue affects domain controllers processing Kerberos authentication requests.

Build
20348.2342
Restart
Required

What changes

Fix 1 change

Local Security Authority Subsystem Service (LSASS)

  • An LSASS memory leak on domain controllers is addressed.1
    The leak occurs when on-premises and cloud-based Active Directory domain controllers process Kerberos authentication requests after installing KB5035857. It might cause excessive memory use, LSASS to stop responding, and unexpected domain controller restarts.

Improvement 1 change

Servicing stack

For: Windows Server 2022 devices

  • The component that installs Windows updates receives quality improvements.2
    Includes servicing stack update 20348.2334.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2024-03-22
Classification
Updates
Type
Cumulative update
Restart
Required
Replaces
KB5035857, KB5034770, KB5034129
Replaced by
KB5036909
VersionBuildChannel
2022 20348.2342 General availability

Security

No vulnerabilities are listed for this update.

Downloads (Microsoft Update Catalog)

x64 2022
394.1 MB
windows10.0-kb5037422-x64.msu Main update · KB5037422 SHA-1: 22f9c64d…07f75d

Updated components

23 files changed since the previous update for the same versions.

Top changed componentsFiles
Hyper-V and virtualization2
Kernel2
Secure Boot1

Sources

Updated
Cited passages from Microsoft's official notes (2)
  1. 1. This update addresses a known issue that affects the Local Security Authority Subsystem Service (LSASS). It might leak memory on domain controllers (DCs). support.microsoft.com
  2. 2. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
Checked automatically: 8 of 8 checks passed, 2 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake