INDEPENDENT MEDIA NETWORK. TECH. IDEAS. PEOPLE.
A BRIGHTER TOMORROW — TODAY.
🌐|||
APPS & SOFTWARE

Kernel Unlock: Microsoft Issues Emergency KB5129235 Patch for Windows Server RDS

High-concurrency NLA logins triggered kernel memory starvation in termdd.sys. Lock-free queues restore instant multi-user desktop access.

Alex Carter
Alex Carter
Sep 15, 2026•3 min read
Kernel Unlock: Microsoft Issues Emergency KB5129235 Patch for Windows Server RDS

⚡️ Lock-Free Ring Buffers & NLA Deserialization

Update KB5129235 refactors the session handshake stack in the termdd.sys kernel driver. Instead of contending for global spinlocks during simultaneous Network Level Authentication (NLA) spikes, the kernel switches to lock-free ring buffers.

This architectural shift lowered kernel CPU consumption to 0.8% and cut TLS negotiation latency down to 14 ms. Corporate server farms can now handle parallel logons for over 250 active sessions without thread starvation.

📊 Hypervisor Kernel Telemetry

: 250 users / min

: 0.8% (was 100% frozen)

: 14 ms (-94%)

: Critical OOB KB5129235

🛠 Sysadmin Incident Response Memo

Тип сбоя
Дедлок пула termdd.sys
Сессии RDP
До 250 одновременных
Статус патча
Out-of-Band (критический)