microsoft / microsoft/WSL

KB5068861 breaks mirror networking with VPN

Open
#13,724 88 comments 56 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

network
Dominant language
C++
Stars
33.7k
Forks
1.8k
Avg merge
3d 17h
Merged PRs (30d)
116

Description

### Windows Version

Windows 1124H2

### WSL Version

2.6.2.0

### Are you using WSL 1 or WSL 2?

- [x] WSL 2
- [ ] WSL 1

### Kernel Version

6.6.87.2-1

### Distro Version

Ubuntu 24.04

### Other Software

_No response_

### Repro Steps

After the update is installed, no longer able to access network resources on VPN. Able to access to internet, only seems to affect VPN. Uninstalling the update restores accessibility to network resources on the other side of the VPN tunnel.

```
> type ~\.wslconfig
[experimental]
networkingMode=mirrored
dnsTunneling=true
```

### Expected Behavior

Expecting to be able to access network resources on other side of VPN tunnel post-KB5068861.

### Actual Behavior

Attempts to connect or even ping hosts on the other side of the VPN tunnel fail. These errors are logged in the kernel dmesg output:

```
[ 7.468330] WSL (218) ERROR: CheckConnection: getaddrinfo() failed: -5
[ 7.501055] WSL (218) ERROR: CheckConnection: getaddrinfo() failed: -5
[ 7.537935] WSL (218) ERROR: CheckConnection: connect() failed: 101
```

### Diagnostic Logs

_No response_

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No source file or test is named. Reproduce on WSL 2.6.2.0 with mirrored networking and dnsTunneling enabled, comparing behavior before and after KB5068861; inspect the reported dmesg errors and VPN connectivity. Done means VPN-side hosts are reachable without uninstalling the Windows update.

Written by the indexing model from the issue text.

Assessment

Tech stack
cpp
Domain
networking, operating-systems
Issue type
Bug
Difficulty
5/5
Estimated time
Over a week
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.