Microsoft has released the KB5058379 cumulative update for Windows 10 21H2 and 22H2, including security patches and bug fixes, notably addressing issues with System Guard Runtime Monitor Broker and GPU support in WSL2. This update is essential for security, as it addresses multiple vulnerabilities and improves system stability.
Affected: Windows 10 21H2, Windows 10 22H2, Windows Update system
Keypoints
- The KB5058379 update is mandatory for Windows 10 21H2 and 22H2 users, containing May 2025 security patches that fix seven zero-day vulnerabilities.
- Users can manually check for and install the update via Settings > Windows Update, or it will automatically install once available.
- Post-update, Windows 10 22H2 will be updated to build 19045.5854, and Windows 10 21H2 to build 19044.5854.
- The update addresses GPU support issues in Windows Subsystem for Linux 2 (WSL2) by fixing case-sensitivity in GPU paravirtualization checks.
- Fixes include updates to the Windows Kernel Vulnerable Driver Blocklist to prevent BYOVD attacks and resolution of errors related to the System Guard Runtime Monitor Broker service.
- For 21H2 devices, the update enhances Secure Boot Advanced Targeting (SBAT) for better detection of Linux systems.
- One known issue persists where Windows update may fail if Citrix Session Recording Agent version 2411 is installed; a workaround is provided in Citrix support.