BSOD during idle - kernal security check failure

matthallsworth · 07 Jan 2021

I have tested memory and found 1 stick with 271 faults running memtest. Other have 0 faults.

Windows memory test also picks up errors.

Probably the cause of this BSOD but to be certain does this report point to memory too?

Windows version 20H2

Thanks

Ztruker · 07 Jan 2021

Any failure during memory test means that DIMM is defective, replace it. You don't need confirmation.
For now, while waiting for a replacement, remove the defective DIMM and see if the problem goes away.

The dump is a Kernel security check. Could be caused by defective RAM but is not specific to that.

matthallsworth · 07 Jan 2021

Ztruker said:

Any failure during memory test means that DIMM is defective, replace it. You don't need confirmation.
For now, while waiting for a replacement, remove the defective DIMM and see if the problem goes away.

The dump is a Kernel security check. Could be caused by defective RAM but is not specific to that.

I have removed the stick and memory tests come back 0 faults.

As to the next BSOD well if that was the issue i hope to never have that appear again.

I was curious if the report shows specifically what the issue was.

Ztruker · 09 Jan 2021

No, it doesn't.

Code:

KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure.  The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: fffff90df22991c0, Address of the trap frame for the exception that caused the bugcheck
Arg3: fffff90df2299118, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved

Code:

CUSTOMER_CRASH_COUNT:  1

BUGCHECK_STR:  0x139

PROCESS_NAME:  System

CURRENT_IRQL:  0

DEFAULT_BUCKET_ID:  FAIL_FAST_CORRUPT_LIST_ENTRY

ERROR_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.

EXCEPTION_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.

EXCEPTION_CODE_STR:  c0000409

Nothing in the dump points to a failing driver or component.

Run the following command from a Elevated Command Prompt:

bcdedit /enum {badmemory}

See what it returns.

matthallsworth · 09 Jan 2021

RAM Defects
-----------
identifier {badmemory}
badmemorylist 0x3fd8d5

Thats what i get, however thats with the ram stick out that proved faults.

- - - Updated - - -

Ztruker said:

No, it doesn't.

I assume you mean it doesn't point to it specifically?

I did google this error and followed all the steps check RAM, hdd, ssd, sfc scan etc only ram has shown faults everything else seems ok.

Not sure if BIOS has any play in this myself but im running a beta version only because I wasn't aware F60c was a beta at the time of updating.

Ztruker · 12 Jan 2021

Replace the RAM with an identical Module and you should be okay.