Microsoft has released Windows Subsystem for Linux (WSL) 2.7.14, which focuses on security hardening with four critical backported fixes addressing issues such as memory leaks and authorization bypasses. This update allows the WSL team to prioritize stability while continuing active feature development on the master branch. The fixes include zero-initialization for memory safety, improved NUL-termination validation, and enhanced network security by restricting the daemon relay to loopback connections only. Users can apply the patch immediately using a PowerShell command to secure their existing distributions without manual intervention
Microsoft Ships WSL 2.7.14: A Security Hardening Patch for Windows Subsystem for Linux
Microsoft has released Windows Subsystem for Linux 2.7.14. The update bundles four major backported fixes addressing uninitialized memory leaks, out-of-bounds reads in interop messages, network exposure on the kernel daemon relay, and authorization bypasses in plugin mounts. By maintaining a dedicated release/2.7 branch for these hardening updates, the WSL team ensures stability without interrupting active feature development on the master track. You can apply the patch immediately by running wsl --update in PowerShell to secure your existing distributions without any manual intervention.
