KB5037422 out-of-band update is here to fix memory leak issues

On Friday, Microsoft released a KB5037422 Out-of-band update to fix the memory leak and other issues users faced after the KB5035857 update. We reported earlier that Microsoft confirmed the issues and is working on a fix.

KB5037422 update fixes known issues that emerged from KB5035857 update

Microsoft talks more about the issues in the release notes for KB5037422, which reads:

This update addresses a known issue that affects the Local Security Authority Subsystem Service (LSASS). It might leak memory on domain controllers (DCs). This issue occurs after you install KB5035857 (March 12, 2024). The leak occurs when on-premises and cloud-based Active Directory DCs process Kerberos authentication requests. This substantial leak might cause excessive memory usage. Because of this, LSASS might stop responding, and the DCs will restart when you do not expect it.

The official bug reporting page titled Issue with Kerberos requests on domain controllers may cause LSASS memory leaks has a new Resolution section that confirms the same. Microsoft also mentions instructions related to installing KB5037422 Out-of-band update:

This issue was resolved in the out-of-band (OOB) update KB5037422, which is only available via the Microsoft Update Catalog. We strongly recommend you do not apply the March 2024 security update on DCs and install KB5037422 instead. As this is a cumulative update, you do not need to apply any previous update before installing KB5037422.

It is worth noting that the KB5037422 Out-of-band update won’t install automatically and isn’t available directly from Windows Update. Therefore, you need to search for KB5037422 in the Microsoft Update Catalog. You can download the update from the Microsoft Update Catalog.

It is still surprising that the KB5037422 update will not install automatically. Nonetheless, a fix is always a thing to cherish. Microsoft says you can refer to WSUS and the Microsoft Update Catalog page for more help.

Did the emergency update help fix issues with KB5035857? Share your thoughts in the comments below.