Windows 11 LTSC 2024 Gets KB5084597 Out-of-Band Update Patching RRAS RCE Flaws

Microsoft has released an emergency out-of-band security update for Windows 11 LTSC 2024 that addresses multiple critical networking vulnerabilities affecting the Routing and Remote Access Service (RRAS).

The update, identified as KB5084597, patches three security flaws tracked as CVE-2026-25172, CVE-2026-25173, and CVE-2026-26111.

Unlike regular updates, this release is delivered as a hotpatch, meaning supported systems can apply the fix without requiring a system restart.

Security flaws affect Windows remote access networking services

The patched vulnerabilities affect the Windows Routing and Remote Access Service management tool, a feature commonly used by organizations to provide secure remote connectivity and network routing.

RRAS supports several enterprise networking functions, including virtual private network connections, dial-up access, site-to-site networking, Network Address Translation (NAT), and dynamic routing protocols such as BGP.

Microsoft classified the vulnerabilities as remote code execution (RCE) issues.

The flaws involve an integer overflow or wraparound bug in RRAS that could allow an authorized attacker to execute code over a network.

According to Microsoft, a successful exploit could allow attackers to disrupt the RRAS management tool or run malicious code on a targeted system if it connects to a malicious remote server.

Hotpatch allows security fixes without reboot

Because the update uses Microsoft’s hotpatch mechanism, eligible systems can install the security fixes without requiring a system reboot.

Hotpatching is primarily designed for enterprise environments where uptime is critical, allowing administrators to deploy urgent security fixes while minimizing service interruptions.

The update will automatically install on systems that have hotpatching enabled.

Microsoft recommends installing the update as soon as possible to reduce the risk of potential exploitation.

Other Windows updates and issues continue to emerge

The release arrives amid a series of recent Windows developments.

Microsoft recently confirmed a separate Windows 11 issue that can prevent users from accessing the system drive after installing a security update.

In addition, new Insider builds in the Beta and Dev channels have introduced improvements to the Windows setup experience along with stricter driver policy enforcement.

Via Neowin