Microsoft has rolled out its latest Patch Tuesday updates for Windows 11, encompassing versions 23H2, 22H2, and 21H2. The updates are identified as KB5041585 for the 23H2 and 22H2 versions, while KB5041592 pertains to 21H2. Upon installation, users will find themselves on build versions 22621.4037, 22631.4037, and 22000.3147, respectively.
23H2 and 22H2
IMPORTANT: The Home and Pro editions of Windows 11, version 22H2, will reach their end of service on October 8, 2024. Following this date, these editions will only receive security updates, with no non-security or preview updates available. To ensure continued access to both security and non-security updates post-October 2024, users are encouraged to upgrade to the latest version of Windows.
Note: Enterprise and Education editions will continue to receive support after October 8, 2024.
Highlights
This update addresses security vulnerabilities within the Windows operating system.
Improvements
Windows 11, version 23H2
Important: To upgrade to Windows 11, version 23H2, utilize EKB KB5027397.
This security update encompasses quality enhancements, including:
- Incorporation of all improvements from Windows 11, version 22H2.
- No additional issues have been documented for this release.
Windows 11, version 22H2
This security update integrates improvements from update KB5040527, released on July 23, 2024. Below is a summary of key issues addressed by this update:
- BitLocker (known issue): Users may encounter a BitLocker recovery screen upon startup after installing the July 9, 2024 update, particularly if device encryption is enabled. To unlock the drive, users might need to enter the recovery key from their Microsoft account via Settings > Privacy & Security > Device encryption.
- Lock screen: This update resolves CVE-2024-38143, which affects the availability of the “Use my Windows user account” checkbox on the lock screen for Wi-Fi connections.
- NetJoinLegacyAccountReuse: This update removes the associated registry key. For further details, refer to KB5020276 regarding Netjoin: Domain join hardening changes.
- Secure Boot Advanced Targeting (SBAT) and Linux Extensible Firmware Interface (EFI): This update applies SBAT to Windows systems, preventing vulnerable Linux EFI (Shim bootloaders) from executing. Note that this SBAT update will not affect systems configured for dual-booting Windows and Linux. Users experiencing boot issues with older Linux ISO images should consult their Linux vendor for updated images.
If prior updates were installed, only the new updates within this package will be downloaded and installed on devices.
For additional information regarding security vulnerabilities, please visit the Security Update Guide website and review the August 2024 Security Updates.
Windows 11 servicing stack update (KB5041584) – 22621.4027 and 22631.4027
This update enhances the servicing stack, the component responsible for installing Windows updates. Servicing stack updates (SSUs) ensure a robust and reliable framework for receiving and installing Microsoft updates.
Known issues in this update
Microsoft is currently unaware of any issues associated with this update.
21H2
IMPORTANT: All editions of Windows 11, version 21H2, will reach their end of service on October 8, 2024. After this date, devices will no longer receive monthly security or non-security updates.
