Windows 10: KERNEL_SECURITY_CHECK_FAILURE 139

Discus and support KERNEL_SECURITY_CHECK_FAILURE 139 in Windows 10 BSOD Crashes and Debugging to solve the problem; I'm having a blue screen and the DMP file shows the following: Note: I uploaded the DMP to OneDrive, kindly find the download link below:... Discussion in 'Windows 10 BSOD Crashes and Debugging' started by Chadayle Hayle, Nov 17, 2020.

  1. KERNEL_SECURITY_CHECK_FAILURE 139


    I'm having a blue screen and the DMP file shows the following:

    Note: I uploaded the DMP to OneDrive, kindly find the download link below:

    https://1drv.ms/u/s!AnV55OtEeJkLsxmmrQ1hGngtnSoE?e=TYir0C

    ******************************************************************************** ** Bugcheck Analysis ** ********************************************************************************KERNEL_SECURITY_CHECK_FAILURE 139A kernel component has corrupted a critical data structure. The corruptioncould potentially allow a malicious user to gain control of this machine.Arguments:Arg1: 000000000000001d, Type of memory safety violationArg2: ffff9302e0612da0, Address of the trap frame for the exception that caused the bugcheckArg3: ffff9302e0612cf8, Address of the exception record for the exception that caused the bugcheckArg4: 0000000000000000, ReservedDebugging Details:------------------*** WARNING: Unable to verify checksum for win32k.sysKEY_VALUES_STRING: 1 Key : Analysis.CPU.mSec Value: 5499 Key : Analysis.DebugAnalysisProvider.CPP Value: Create: 8007007e on CHADAYLE Key : Analysis.DebugData Value: CreateObject Key : Analysis.DebugModel Value: CreateObject Key : Analysis.Elapsed.mSec Value: 13787 Key : Analysis.Memory.CommitPeak.Mb Value: 89 Key : Analysis.System Value: CreateObject Key : WER.OS.Branch Value: 19h1_release Key : WER.OS.Timestamp Value: 2019-03-18T12:02:00Z Key : WER.OS.Version Value: 10.0.18362.1ADDITIONAL_XML: 1OS_BUILD_LAYERS: 1BUGCHECK_CODE: 139BUGCHECK_P1: 1dBUGCHECK_P2: ffff9302e0612da0BUGCHECK_P3: ffff9302e0612cf8BUGCHECK_P4: 0TRAP_FRAME: ffff9302e0612da0 -- .trap 0xffff9302e0612da0NOTE: The trap frame does not contain all registers.Some register values may be zeroed or incorrect.rax=ffffc5820f3a9fe8 rbx=0000000000000000 rcx=000000000000001drdx=ffffc4820f3a9fe8 rsi=0000000000000000 rdi=0000000000000000rip=fffff80021206d47 rsp=ffff9302e0612f38 rbp=ffff9302e0612ff9 r8=0000000000000001 r9=0000000000000000 r10=ffffc4820f1cbfe8r11=ffffc4820f3a9fe8 r12=0000000000000000 r13=0000000000000000r14=0000000000000000 r15=0000000000000000iopl=0 nv up ei pl nz na po ncnt!RtlRbRemoveNode+0x1a34d7:fffff800`21206d47 cd29 int 29hResetting default scopeEXCEPTION_RECORD: ffff9302e0612cf8 -- .exr 0xffff9302e0612cf8ExceptionAddress: fffff80021206d47 nt!RtlRbRemoveNode+0x00000000001a34d7 ExceptionCode: c0000409 Security check failure or stack buffer overrun ExceptionFlags: 00000001NumberParameters: 1 Parameter[0]: 000000000000001dSubcode: 0x1d FAST_FAIL_INVALID_BALANCED_TREE BLACKBOXBSD: 1 !blackboxbsdBLACKBOXNTFS: 1 !blackboxntfsBLACKBOXWINLOGON: 1CUSTOMER_CRASH_COUNT: 1PROCESS_NAME: SystemERROR_CODE: NTSTATUS 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.EXCEPTION_CODE_STR: c0000409EXCEPTION_PARAMETER1: 000000000000001dEXCEPTION_STR: 0xc0000409STACK_TEXT: ffff9302`e0612a78 fffff800`211d5929 : 00000000`00000139 00000000`0000001d ffff9302`e0612da0 ffff9302`e0612cf8 : nt!KeBugCheckExffff9302`e0612a80 fffff800`211d5d50 : 00000000`00000000 00000000`00000000 ffff9983`0a694040 1a000000`5d9a6863 : nt!KiBugCheckDispatch+0x69ffff9302`e0612bc0 fffff800`211d40e3 : 00000000`00000000 fffff800`210cd088 ffff8800`00000000 ffff8844`00000000 : nt!KiFastFailDispatch+0xd0ffff9302`e0612da0 fffff800`21206d47 : 00000000`000000b1 ffffc482`0f379000 fffff800`2105ef31 ffff9302`e0612ff9 : nt!KiRaiseSecurityCheckFailure+0x323ffff9302`e0612f38 fffff800`2105ef31 : ffff9302`e0612ff9 ffffc481`ea400280 ffffc482`0f387fe0 ffffc481`ea400280 : nt!RtlRbRemoveNode+0x1a34d7ffff9302`e0612f50 fffff800`21062bd1 : ffff9302`e0612ff9 00000013`01020000 ffffc482`0f3873a0 ffffc482`0f387eb0 : nt!RtlpHpVsFreeChunkRemove+0x25ffff9302`e0612f80 fffff800`21061fa9 : 00000013`00000013 ffffc482`0f3873a0 00000002`00000001 00000000`00000000 : nt!RtlpHpVsChunkSplit+0xb31ffff9302`e0613050 fffff800`2103854a : ffff9302`000000b2 33333333`00000b00 00000000`00000b00 00000000`00000000 : nt!RtlpHpVsContextAllocateInternal+0x3c9ffff9302`e06130c0 fffff800`2136e06d : 00000000`00000001 00000000`00000000 00000000`00000001 00000000`00000000 : nt!ExAllocateHeapPool+0xc6affff9302`e0613200 fffff800`25467aa2 : ffff9302`e06133e0 ffff9302`e0613480 00000000`000012ce 00000000`00000000 : nt!ExAllocatePoolWithTag+0x5dffff9302`e0613250 fffff800`2546232d : fffff800`25430388 ffffc482`0f3dd760 ffffc482`06193000 ffffc482`0f37fe50 : CI!MincryptAlloc+0x1effff9302`e0613280 fffff800`254632a6 : ffff9302`e0613564 ffffc482`0f37fd20 00000000`00000000 000001fc`00000000 : CI!MinCrypK_VerifySignedDataKModeEx+0xa1ffff9302`e0613380 fffff800`254634f2 : 00000000`c0000225 00000000`c0000225 ffff9302`0000000f 000001fc`da690b90 : CI!I_MinCryptVerifyRFC3161TimeStamp+0x76ffff9302`e0613510 fffff800`25462732 : 00000000`00000000 ffffc481`f6347678 00000000`00000000 ffff9302`e0613638 : CI!I_MinCryptGetSigningTime+0x12effff9302`e06135b0 fffff800`25448045 : 00000000`00000020 ffffc481`f6347620 00000000`00000000 000001fc`00000000 : CI!MinCrypK_VerifySignedDataKModeEx+0x4a6ffff9302`e06136b0 fffff800`25449f41 : 00000000`00000020 00000000`00000000 00000000`00002aa1 ffffc481`f6347620 : CI!I_ParseCatalog+0x91ffff9302`e0613740 fffff800`25447dca : 00000000`00000000 00000000`00000108 00000000`00002aa1 00000000`00000000 : CI!I_ParseCatalogAndMapHashes+0xa1ffff9302`e06137c0 fffff800`25448aeb : ffff9302`e06139a0 ffffc481`f6347620 00000000`0000800c 00000000`00000000 : CI!I_MapCatalog+0x3e6ffff9302`e06138b0 fffff800`25448699 : 00000000`00000000 ffffc482`0931c200 ffff9302`e0613a11 00000000`00000100 : CI!I_ReloadCatalog+0x263ffff9302`e0613930 fffff800`2544837e : 00000000`00000001 ffff9302`00000000 ffffc482`00000000 00000000`00000001 : CI!I_ReloadCatalogDirectory+0x299ffff9302`e0613a60 fffff800`25446da4 : ffffc482`060a1e20 ffff9302`00000001 ffff9302`e0613bd0 00000000`00000004 : CI!I_ReloadCatalogs+0x17affff9302`e0613ad0 fffff800`25446b45 : ffffc482`00000000 ffff9302`e0613e44 ffff9983`172e8060 fffff800`21043fd7 : CI!I_FindFileOrHeaderHashInCatalogs+0x250ffff9302`e0613c30 fffff800`25452362 : 00000000`0000800c ffffc482`060a1650 ffff9983`172e8060 ffff9983`0f4878d0 : CI!MinCrypK_FindPageHashesInCatalog+0xb1ffff9302`e0613ce0 fffff800`2544e107 : ffffc482`0000006f 00000000`00000000 00000000`00000000 00000000`00000004 : CI!CiVerifyPageHashInCatalogs+0x192ffff9302`e0613de0 fffff800`2544f441 : ffff9302`e0614208 ffff9302`e0614111 00000000`00000000 ffffc482`060a1650 : CI!CipGetPageHashesForFile+0x18fffff9302`e0613f40 fffff800`2544e9f9 : ffffc482`060a1650 ffff9983`1627f160 ffff9983`1a0e7080 ffffc482`08856000 : CI!CipValidatePageHash+0x2a1ffff9302`e0614030 fffff800`2544cd16 : ffff9983`1a0e7084 00000000`00000000 ffff9983`1627f160 00000000`00000000 : CI!CipValidateImageHash+0xedffff9302`e0614160 fffff800`2165c756 : 00000000`00000000 fffff800`6dfe0000 00000000`0000000e ffffc482`08856000 : CI!CiValidateImageHeader+0x716ffff9302`e06142f0 fffff800`2165c27a : 00000000`00000008 00000000`00000001 00000000`00000001 00000000`00000000 : nt!SeValidateImageHeader+0xd6ffff9302`e06143a0 fffff800`2166f36f : ffff9302`e0614570 00000000`00000240 00000000`00000000 00000000`00000000 : nt!MiValidateSectionCreate+0x436ffff9302`e0614590 fffff800`2166f2b4 : ffff9302`e0614840 ffff9302`e0614840 00000000`00000002 00000000`00000002 : nt!MiValidateSectionSigningPolicy+0x97ffff9302`e06145f0 fffff800`215d4f56 : 00000000`00000001 ffff9302`e0614800 ffffc481`eebd27d0 ffff9983`10eb4c20 : nt!MiValidateExistingImage+0x364ffff9302`e06146a0 fffff800`215d6c73 : ffff9983`1627f160 ffff9302`e0614840 ffff9983`0ad05080 ffff9983`1627f160 : nt!MiShareExistingControlArea+0xc2ffff9302`e06146d0 fffff800`215d70a4 : ffff9983`10eb4c20 00000000`00000000 ffff9983`1627f160 00000000`00000000 : nt!MiCreateImageOrDataSection+0x1a3ffff9302`e06147c0 fffff800`215d66ff : 00000000`01000000 ffff9302`e0614b80 00000000`00000001 00000000`00000010 : nt!MiCreateSection+0xf4ffff9302`e0614940 fffff800`215d6490 : 00000049`f17ac5c8 00000000`0000000d 00000000`00000000 00000000`00000001 : nt!MiCreateSectionCommon+0x1ffffff9302`e0614a20 fffff800`211d5358 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!NtCreateSection+0x60ffff9302`e0614a90 00007ffe`964fd034 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x2800000049`f17ac578 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffe`964fd034SYMBOL_NAME: CI!MincryptAlloc+1eMODULE_NAME: CIIMAGE_NAME: CI.dllIMAGE_VERSION: 10.0.18362.1171STACK_COMMAND: .thread ; .cxr ; kbBUCKET_ID_FUNC_OFFSET: 1eFAILURE_BUCKET_ID: 0x139_1d_INVALID_BALANCED_TREE_CI!MincryptAllocOS_VERSION: 10.0.18362.1BUILDLAB_STR: 19h1_releaseOSPLATFORM_TYPE: x64OSNAME: Windows 10FAILURE_ID_HASH: {d1f76757-8d6b-16ff-6d51-7a783ea174b5}Followup: MachineOwner---------

    :)
     
    Chadayle Hayle, Nov 17, 2020
    #1

  2. KERNEL_SECURITY_CHECK_FAILURE (139)

    Hi MohamedBishr

    Greetings! I am Vijay, an Independent Advisor. I am here to work with you on this problem.

    A. Analysis Results

    File Name: 081819-15328-01.dmp

    KERNEL_SECURITY_CHECK_FAILURE (139)

    IMAGE_NAME: CLASSPNP.SYS

    B. Third Party Drivers

    None

    C. Recommendations

    a. Create a system restore point first so that if something wrong happens you can revert.

    Type restore point in Cortana Search > Create a Restore point > Check whether against your drive, Protection is ON or not. If not ON, click Configure button below to Make it ON > Now press Create to create a restore point

    b. Some third party drivers are causing BSODs. To know if a third party driver is one of the causes - Enable Driver Verifier and generate dump files and upload to Onedrive and share the link here (Don't forget to turn off Driver Verifier after the job is done).
    Do read the instructions carefully particularly how to get back into Windows when you get the crash.

    https://www.tenforums.com/tutorials/5470-enable...

    Disclaimer - This is a non-Microsoft website. The page appears to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product
    advertised on the site before you decide to download and install it.
     
    Vijay_Verma, Nov 17, 2020
    #2
  3. KERNEL_SECURITY_CHECK_FAILURE

    Hi SunderBiticon

    Greetings! I am Vijay, an Independent Advisor. I am here to work with you on this problem.

    A. Analysis Results

    File Name: 042319-10796-01.dmp

    KERNEL_SECURITY_CHECK_FAILURE (139)

    *** WARNING: Unable to verify timestamp for BEDaisy.sys

    IMAGE_NAME: BEDaisy.sys

    File Name: 042319-11250-01.dmp

    KERNEL_SECURITY_CHECK_FAILURE (139)

    *** WARNING: Unable to verify timestamp for BEDaisy.sys

    IMAGE_NAME: BEDaisy.sys

    File Name: 042319-11406-01.dmp

    KERNEL_SECURITY_CHECK_FAILURE (139)

    *** WARNING: Unable to verify timestamp for BEDaisy.sys

    IMAGE_NAME: BEDaisy.sys

    B. Third Party Drivers

    BEDaisy.sys - Battle Eye

    Drive Date - Mon Feb 25 04:08:41 2019

    C. Recommendations

    1. Create a system restore point so that if something wrong happens you can revert.

    Type restore point in Cortana Search > Create a Restore point > Check whether against your drive, Protection is ON or not. If not ON, click Configure button below to Make it ON > Now press Create to create a restore point

    2. The crash is caused by Battle Eye. Update the concerned game to latest so that this driver gets updated.

    Do let me know if you require any further help on this. Will be glad to help you.
     
    Vijay_Verma, Nov 17, 2020
    #3
  4. Arthur Win User

    KERNEL_SECURITY_CHECK_FAILURE 139

    BSOD - KERNEL_SECURITY_CHECK_FAILURE (139) | avc3.sys


    Hi,

    May I hereby seek assistance for the following BSOD issue please.

    Code:
    Code:
    ********************************************************************************                                                                             * *                        Bugcheck Analysis                                    * *                                                                             * *******************************************************************************  KERNEL_SECURITY_CHECK_FAILURE (139) A kernel component has corrupted a critical data structure.  The corruption could potentially allow a malicious user to gain control of this machine. Arguments: Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove). Arg2: ffffd00022176820, Address of the trap frame for the exception that caused the bugcheck Arg3: ffffd00022176778, Address of the exception record for the exception that caused the bugcheck Arg4: 0000000000000000, Reserved
    I've been frequently getting BSODs from cold boot right after POST. I am suspecting it has something to do with Bitdefender 2016 as the driver mentioned below points to Bitdefender's Active Virus Control filter.

    Code:
    Code:
    Probably caused by : avc3.sys ( avc3!UcAddUrlEntry+2f704 )
    I wish to understand the root cause of this issue. Your help is greatly appreciated.

    Thank you,
     
    Arthur, Nov 17, 2020
    #4
Thema:

KERNEL_SECURITY_CHECK_FAILURE 139

Loading...
  1. KERNEL_SECURITY_CHECK_FAILURE 139 - Similar Threads - KERNEL_SECURITY_CHECK_FAILURE 139

  2. KERNEL_SECURITY_CHECK_FAILURE 139

    in Windows 10 Gaming
    KERNEL_SECURITY_CHECK_FAILURE 139: Hello,My PC has windows 10 installed, with a RTX4080 graphical card. Recent days when I play Baldur's Gate 3 for a hour or two, it will crash. Currently it crashed twice, first time it directly reboot the system, the second time it leads to a blue screen.I have uploaded the...
  3. KERNEL_SECURITY_CHECK_FAILURE 139

    in Windows 10 Software and Apps
    KERNEL_SECURITY_CHECK_FAILURE 139: Hello,My PC has windows 10 installed, with a RTX4080 graphical card. Recent days when I play Baldur's Gate 3 for a hour or two, it will crash. Currently it crashed twice, first time it directly reboot the system, the second time it leads to a blue screen.I have uploaded the...
  4. KERNEL_SECURITY_CHECK_FAILURE 139

    in Windows 10 BSOD Crashes and Debugging
    KERNEL_SECURITY_CHECK_FAILURE 139: Hello,My PC has windows 10 installed, with a RTX4080 graphical card. Recent days when I play Baldur's Gate 3 for a hour or two, it will crash. Currently it crashed twice, first time it directly reboot the system, the second time it leads to a blue screen.I have uploaded the...
  5. BSOD KERNEL_SECURITY_CHECK_FAILURE 139

    in Windows 10 Gaming
    BSOD KERNEL_SECURITY_CHECK_FAILURE 139: Left my PC for a bit and when I came back it had rebooted. Digging through the logs showed an error had occurred. I have made no changes to the hardware or drivers of my PC recently, so I was wondering what could have caused the issue in order to prevent it from happening in...
  6. BSOD KERNEL_SECURITY_CHECK_FAILURE 139

    in Windows 10 Software and Apps
    BSOD KERNEL_SECURITY_CHECK_FAILURE 139: Left my PC for a bit and when I came back it had rebooted. Digging through the logs showed an error had occurred. I have made no changes to the hardware or drivers of my PC recently, so I was wondering what could have caused the issue in order to prevent it from happening in...
  7. BSOD KERNEL_SECURITY_CHECK_FAILURE 139

    in Windows 10 BSOD Crashes and Debugging
    BSOD KERNEL_SECURITY_CHECK_FAILURE 139: Left my PC for a bit and when I came back it had rebooted. Digging through the logs showed an error had occurred. I have made no changes to the hardware or drivers of my PC recently, so I was wondering what could have caused the issue in order to prevent it from happening in...
  8. KERNEL_SECURITY_CHECK_FAILURE 139 , first BSOD in a while, do I need to be worried?

    in Windows 10 Gaming
    KERNEL_SECURITY_CHECK_FAILURE 139 , first BSOD in a while, do I need to be worried?: Had this BSOD this morning, the stop code mentioned security so im a bit on edge, can someone take a look? I have pasted the debug below and here is a drive link to the dmp file:...
  9. KERNEL_SECURITY_CHECK_FAILURE 139 , first BSOD in a while, do I need to be worried?

    in Windows 10 Software and Apps
    KERNEL_SECURITY_CHECK_FAILURE 139 , first BSOD in a while, do I need to be worried?: Had this BSOD this morning, the stop code mentioned security so im a bit on edge, can someone take a look? I have pasted the debug below and here is a drive link to the dmp file:...
  10. DRIVER_IRQL_NOT_LESS_OR_EQUAL d1 ; KERNEL_SECURITY_CHECK_FAILURE 139 ; IRQL_NOT_LESS_OR_EQUAL a

    in Windows 10 Software and Apps
    DRIVER_IRQL_NOT_LESS_OR_EQUAL d1 ; KERNEL_SECURITY_CHECK_FAILURE 139 ; IRQL_NOT_LESS_OR_EQUAL a: Hi there,I have a user with a brand-new Thinkpad P14s with Windows 11 installed, complaining that the laptop reboots frequently, especially during Google meets.I'm adding the link with the latest dump...