KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffffa884ff8ca5c0, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffffa884ff8ca518, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
Debugging Details:
------------------
KEY_VALUES_STRING: 1
Key : Analysis.CPU.Sec
Value: 27
Key : Analysis.Elapsed.Sec
Value: 31
Key : Analysis.Memory.CommitPeak.Mb
Value: 69
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 18362.1.amd64fre.19h1_release.190318-1202
DUMP_TYPE: 2
BUGCHECK_P1: 3
BUGCHECK_P2: ffffa884ff8ca5c0
BUGCHECK_P3: ffffa884ff8ca518
BUGCHECK_P4: 0
TRAP_FRAME: ffffa884ff8ca5c0 -- (.trap 0xffffa884ff8ca5c0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffff9089dea06698 rbx=0000000000000000 rcx=0000000000000003
rdx=fffff80538060880 rsi=0000000000000000 rdi=0000000000000000
rip=fffff805383d200f rsp=ffffa884ff8ca750 rbp=ffffa884ff8ca959
r8=ffffa884ff8ca758 r9=0000000000000000 r10=fffff80537c38850
r11=ffffa884ff8ca6b0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na po cy
nt!CmNotifyRunDown+0x175acf:
fffff805`383d200f cd29 int 29h
Resetting default scope
EXCEPTION_RECORD: ffffa884ff8ca518 -- (.exr 0xffffa884ff8ca518)
ExceptionAddress: fffff805383d200f (nt!CmNotifyRunDown+0x0000000000175acf)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 0000000000000003
Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY
CPU_COUNT: 40
CPU_MHZ: bb8
CPU_VENDOR: AuthenticAMD
CPU_FAMILY: 17
CPU_MODEL: 8
CPU_STEPPING: 2
CUSTOMER_CRASH_COUNT: 1
BUGCHECK_STR: 0x139
PROCESS_NAME: ko2212_isdbginclude.exe
CURRENT_IRQL: 1
DEFAULT_BUCKET_ID: FAIL_FAST_CORRUPT_LIST_ENTRY
ERROR_CODE: (NTSTATUS) 0xc0000409 - Sistem, bu uygulamada y n tabanl bir arabelle in ta t n alg lad . Bu ta ma, k t niyetli bir kullan c n n bu uygulaman n denetimini ele ge irmesine olanak verebilir.
EXCEPTION_CODE: (NTSTATUS) 0xc0000409 - Sistem, bu uygulamada y n tabanl bir arabelle in ta t n alg lad . Bu ta ma, k t niyetli bir kullan c n n bu uygulaman n denetimini ele ge irmesine olanak verebilir.
EXCEPTION_CODE_STR: c0000409
EXCEPTION_PARAMETER1: 0000000000000003
ANALYSIS_SESSION_HOST: DESKTOP-I8FA0KP
ANALYSIS_SESSION_TIME: 08-27-2019 16:51:17.0757
ANALYSIS_VERSION: 10.0.18914.1001 amd64fre
LAST_CONTROL_TRANSFER: from fffff80537dce6e9 to fffff80537dbc900
STACK_TEXT:
ffffa884`ff8ca298 fffff805`37dce6e9 : 00000000`00000139 00000000`00000003 ffffa884`ff8ca5c0 ffffa884`ff8ca518 : nt!KeBugCheckEx
ffffa884`ff8ca2a0 fffff805`37dceb10 : ffffa884`ff8ca7e0 00000000`00000002 ffffa884`ff8ca630 00000000`00000006 : nt!KiBugCheckDispatch+0x69
ffffa884`ff8ca3e0 fffff805`37dccea5 : ffff9089`00000002 ffff9484`af895230 ffffa884`ff8ca760 00000000`00000000 : nt!KiFastFailDispatch+0xd0
ffffa884`ff8ca5c0 fffff805`383d200f : ffff9089`dea06698 fffff805`00000000 ffff9089`00000000 ffff9484`af895230 : nt!KiRaiseSecurityCheckFailure+0x325
ffffa884`ff8ca750 fffff805`3825bfd5 : ffff9089`dea06080 ffffa884`ff8ca959 00000000`00000000 ffff9089`dea06080 : nt!CmNotifyRunDown+0x175acf
ffffa884`ff8ca7b0 fffff805`382ca853 : ffffa884`c000013a ffffa884`ff8caa00 00000000`00000000 00000000`00000000 : nt!PspExitThread+0x2cd
ffffa884`ff8ca8c0 fffff805`37c3da11 : ffffa884`ff8ca9d9 fffff805`37cd13d5 ffffba00`3bec9180 fffff805`37c3944d : nt!KiSchedulerApcTerminate+0x33
ffffa884`ff8ca900 fffff805`37dc0df0 : 00000000`00000001 ffffa884`ff8ca9c0 00000000`00000000 00000000`00000000 : nt!KiDeliverApc+0x481
ffffa884`ff8ca9c0 fffff805`37dc0c11 : 00000000`00008c00 00000000`00000000 ffff9089`00000000 ffffffff`ff676980 : nt!KiInitiateUserApc+0x70
ffffa884`ff8cab00 00000000`00ac547e : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiApcInterrupt+0x341
00000000`0019e500 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0xac547e
THREAD_SHA1_HASH_MOD_FUNC: 5e85cbb3a91d5097e24bc9551e36c2091c91710d
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 9e5bad14e7c48f125d70a10de2bb860be9e8aaa6
THREAD_SHA1_HASH_MOD: bc100a5647b828107ac4e18055e00abcbe1ec406
FOLLOWUP_IP:
nt!KiFastFailDispatch+d0
fffff805`37dceb10 c644242000 mov byte ptr [rsp+20h],0
FAULT_INSTR_CODE: 202444c6
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: nt!KiFastFailDispatch+d0
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 3ed0f42
IMAGE_VERSION: 10.0.18362.239
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: d0
FAILURE_BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_nt!KiFastFailDispatch
BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_nt!KiFastFailDispatch
PRIMARY_PROBLEM_CLASS: 0x139_3_CORRUPT_LIST_ENTRY_nt!KiFastFailDispatch
TARGET_TIME: 2019-08-26T18:07:57.000Z
OSBUILD: 18362
OSSERVICEPACK: 239
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 1972-02-02 11:33:06
BUILDDATESTAMP_STR: 190318-1202
BUILDLAB_STR: 19h1_release
BUILDOSVER_STR: 10.0.18362.1.amd64fre.19h1_release.190318-1202
ANALYSIS_SESSION_ELAPSED_TIME: 7cc8
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x139_3_corrupt_list_entry_nt!kifastfaildispatch
FAILURE_ID_HASH: {3aede96a-54dd-40d6-d4cb-2a161a843851}
Followup: MachineOwner