Microsoft has published SQL Server 2022 CU24 + GDR KB5083252, which updates the Database Engine to 16.0.4250.1. The release includes 2 fixes and is focused on security-related changes in the SQL Server Engine.
Improvements and fixes
This update covers two areas:
- Linked Server on Linux and Windows: a fix for an elevation of privilege vulnerability in SQL Server linked servers, identified as bug 5063812.
- SQL Agent on Windows: a fix for an issue involving improper neutralization of special elements in SQL commands, described as a SQL injection problem that could allow an authorized attacker to elevate privileges over a network, identified as bug 5052462.
Microsoft says the update resolves vulnerabilities and points to the related security advisories for CVE-2026-32167 and CVE-2026-32176.
Known issues
Microsoft documents one known issue in this release:
- Linked server queries that use MSDASQL can fail with error 7416 when a provider string (
@provstr) is specified. In that case, the query returns:Msg 7416, Level 16 Access to the remote server is denied because no login-mapping exists.Microsoft says a stricter connection validation check in the Database Engine can reject some linked server configurations that use the MSDASQL provider, even if earlier builds allowed them.
Microsoft also notes that removal of an issue from the source does not, by itself, prove it has been resolved.
Release details
- KB: KB5083252
- Update name: CU24 + GDR
- Product version: SQL Server 2022
- Build number: 16.0.4250.1
- Official release date: 2026-04-14