Windows 2022 21H2 Cumulative Updates Failing

You can also try a repair install by running setup.exe from the root of install media but this seems risky for a domain controller. Also these sorts of issues are not worth spending any time on. Much simpler and safer to stand up a new one for replacement.        

I'd use dcdiag / repadmin tools to verify health `correcting all errors found` before starting `any` operations. Then stand up the new 2022, patch it fully, license it, join existing domain, add active directory domain services, promote it also making it a GC (recommended), transfer FSMO roles over (optional), transfer pdc emulator role (optional), use dcdiag / repadmin tools to again verify health, when all is good you can decommission / demote old one.