KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: fffff40dc264ef20, Address of the trap frame for the exception that caused the BugCheck
Arg3: fffff40dc264ee78, Address of the exception record for the exception that caused the BugCheck
Arg4: 0000000000000000, Reserved
PROCESS_NAME: System
ERROR_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.
EXCEPTION_CODE_STR: c0000409
EXCEPTION_PARAMETER1: 0000000000000003
EXCEPTION_STR: 0xc0000409
STACK_TEXT:
fffff40d`c264ebf8 fffff807`838b2be9 : 00000000`00000139 00000000`00000003 fffff40d`c264ef20 fffff40d`c264ee78 : nt!KeBugCheckEx
fffff40d`c264ec00 fffff807`838b31f2 : 00000000`00000000 fffff807`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff40d`c264ed40 fffff807`838b0e28 : 00000000`00000082 00000000`00000000 ffffbf02`a3380e08 00000000`00000000 : nt!KiFastFailDispatch+0xb2
fffff40d`c264ef20 fffff807`15a3a010 : 00000000`00000000 fffff40d`00000001 fffff807`15a788a0 00000188`aa4a60ff : nt!KiRaiseSecurityCheckFailure+0x368
fffff40d`c264f0b0 fffff807`15a373cd : 00000000`00000000 fffff807`15a78098 ffff9200`34140a90 ffff9200`34140ac0 : tpm!Tpm20ResourceMgr::RemovedLoadedResource+0xc0
fffff40d`c264f0f0 fffff807`15a497a5 : ffff920f`dc62c770 ffff9200`00000000 fffff40d`c264f199 ffff920f`dc6e0444 : tpm!Tpm20ResourceMgr::ProcessUpdatedTpmState+0x199
fffff40d`c264f130 fffff807`15a49c70 : ffff920f`dc62c770 00000000`00000009 fffff40d`c2648002 fffff807`00000000 : tpm!Tpm20ResourceMgr::SubmitRequest+0x9d5
fffff40d`c264f200 fffff807`15a4ac82 : fffff40d`c264f430 ffffbf02`a32d2d90 00000000`00000001 00000000`00000000 : tpm!Tpm20Scheduler::DoUserRequest+0x220
fffff40d`c264f330 fffff807`15a48da8 : 00000000`00000000 ffffbf02`a32d2d90 fffff807`15a48d60 ffffbf02`a32d2d90 : tpm!Tpm20Scheduler::SchedulerThreadFunction+0x7e2
fffff40d`c264f540 fffff807`836815ea : ffffbf02`a3361100 fffff807`15a48d60 00000000`00000000 ffffd101`2aca0180 : tpm!Tpm20Scheduler::SchedulerThreadWrapper+0x48
fffff40d`c264f570 fffff807`8389fd74 : ffffd101`2aca0180 ffffbf02`a3361100 fffff807`83681590 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
fffff40d`c264f5c0 00000000`00000000 : fffff40d`c2650000 fffff40d`c2649000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x34
SYMBOL_NAME: tpm!Tpm20ResourceMgr::RemovedLoadedResource+c0
MODULE_NAME: tpm
IMAGE_NAME: tpm.sys
IMAGE_VERSION: 10.0.26100.7019
STACK_COMMAND: .process /r /p 0xffffbf02a1559040; .thread 0xffffbf02a3361100 ; kb
BUCKET_ID_FUNC_OFFSET: c0
FAILURE_BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_tpm!Tpm20ResourceMgr::RemovedLoadedResource
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {1764a007-36a0-ad2e-affa-7bb93db2d908}
Followup: MachineOwner
---------
