Microsoft confirms KB5035857 is riddled with bugs, triggers memory leaks & reboots on DCs

Every few months, the release of a Windows update makes it to the news for all the wrong reasons. This time, it is Windows Server 2022, KB5035857, on OS Build 20348.2340!

Released on March 12, 2024, the buggy security update only affects environments on the Windows Server platform and not home devices.

On the official bug reporting page, the KB5035857 report titled Issue with Kerberos requests on domain controllers may cause LSASS memory leaks reads,

Following installation of the March 2024 security update, released March 12, 2024 (KB5035857), Local Security Authority Subsystem Service (LSASS) may experience a memory leak on domain controllers (DCs). This is observed when on-premises and cloud-based Active Directory Domain Controllers service Kerberos authentication requests.

Extreme memory leaks may cause LSASS to crash, which triggers an unscheduled reboot of underlying domain controllers (DCs).

Affected platforms, as reported by Microsoft, include Windows Server 2022, Windows Server 2019, Windows Server 2016, and Windows Server 2012 R2.

The good news, Microsoft has identified the underlying cause and is working on developing and deploying a patch. Microsoft says all memory leaks, random crashes, and reboot issues with KB5035857 should be resolved in a few days.

Have you faced the same problems with KB5035857? Share with our readers in the comments sections.