Full Report
Microsoft claims it's a Secure Launch bug We're not saying Copilot has become sentient and decided it doesn't want to lose consciousness. But if it did, it would create Microsoft's January Patch Tuesday update, which has made it so that some PCs flat-out refuse to shut down or hibernate, no matter how many times you try.…
Analysis Summary
# Vulnerability: Unintended System Persistence After January Patch Tuesday Update
## CVE Details
- CVE ID: Not explicitly provided in the text (This appears to be a quality issue/bug introduced by a non-security update component, or an unassigned CVE related to the update rollout).
- CVSS Score: N/A (Focus is on availability/usability bug, not a classic exploitable vulnerability).
- CWE: N/A (Likely an issue in system state management or hibernation/shutdown sequence).
## Affected Systems
- Products: Windows 11
- Versions: 23H2
- Configurations: Systems where the "Secure Launch" security feature is enabled, after installing the January 2026 Patch Tuesday updates.
## Vulnerability Description
Microsoft's January security updates introduced a regression bug affecting systems running Windows 11 23H2 with Secure Launch enabled. Secure Launch utilizes virtualization-based protections. After the update, attempts to shut down, hibernate, or restart the machine fail to complete, leaving the PC running actively.
## Exploitation
- Status: Not applicable (This is a functional bug introduced by the patch, not a security exploit).
- Complexity: N/A
- Attack Vector: N/A
## Impact
- Confidentiality: No direct impact reported.
- Integrity: No direct impact reported.
- Availability: **High** (Prevents critical functions like shutdown/hibernation, leading to battery drain and operational downtime if the user relies on sleep states).
## Remediation
### Patches
- **Fix Status:** Not yet released. Microsoft promises a resolution in a "future update."
### Workarounds
1. **Forced Shutdown:** Users can force the PC to power off by running the command: `shutdown /s /t 0` in the command prompt.
2. **Precautionary Measure:** Users should manually save all work before attempting to shut down, as the system will remain running instead of entering hibernation/sleep mode.
## Detection
- Indicators of Compromise: PCs that are commanded to shut down or hibernate remain powered on indefinitely.
- Detection methods and tools: Monitoring system event logs for failed shutdown/sleep transitions subsequent to installing the January updates (the update KB number is not specified, but it is related to the January 2026 Patch Tuesday release).
## References
- Vendor Advisories: Notices on the Windows release health dashboard (Specific URL provided in the source material: `https://learn.microsoft.com/en-us/windows/release-health/status-windows-11-23h2#devices-with-secure-launch-might-fail-to-shut-down-or-hibernate`)