diff --git a/_codeql_detected_source_root b/_codeql_detected_source_root
new file mode 120000
index 000000000..945c9b46d
--- /dev/null
+++ b/_codeql_detected_source_root
@@ -0,0 +1 @@
+.
\ No newline at end of file
diff --git a/src/shared/inc/lxinitshared.h b/src/shared/inc/lxinitshared.h
index b64fbf13e..b58cefa83 100644
--- a/src/shared/inc/lxinitshared.h
+++ b/src/shared/inc/lxinitshared.h
@@ -287,7 +287,7 @@ Module Name:
 // Definitions used by WSLA
 //
 
-constexpr auto c_ephemeralPortRange = std::pair<uint16_t, uint16_t>(10000, 20000);
+constexpr auto c_ephemeralPortRange = std::pair<uint16_t, uint16_t>(10000, 20001);
 
 // The types of messages that can be sent to init and mini init.
 //
diff --git a/src/windows/wslaservice/exe/WSLAVirtualMachine.cpp b/src/windows/wslaservice/exe/WSLAVirtualMachine.cpp
index 5f8c90f22..4299187e7 100644
--- a/src/windows/wslaservice/exe/WSLAVirtualMachine.cpp
+++ b/src/windows/wslaservice/exe/WSLAVirtualMachine.cpp
@@ -32,7 +32,7 @@ constexpr auto MAX_CRASH_DUMPS = 10;
 constexpr auto SAVED_STATE_FILE_EXTENSION = L".vmrs";
 constexpr auto SAVED_STATE_FILE_PREFIX = L"saved-state-";
 constexpr auto RECEIVE_TIMEOUT = 30 * 1000;
-constexpr auto CONTAINER_PORT_RANGE = std::pair<uint16_t, uint16_t>(20001, 65535);
+constexpr auto CONTAINER_PORT_RANGE = std::pair<uint16_t, uint16_t>(20002, 65535);
 
 static_assert(c_ephemeralPortRange.second < CONTAINER_PORT_RANGE.first);