Kernel Security Check Failure Windows 8
I have had this error at random times while i am on my computer. Here is the drop box file with all the Minidump files. https://dl.dropboxusercontent.com/u/71858973/Minidump%20(2).zip
November 3rd, 2014 12:44am

Hi,

Use !analyze -v to get detailed debugging information.

BugCheck 139, {3, fffff8015f30b560, fffff8015f30b4b8, 0}

*** WARNING: Unable to verify timestamp for MRVW24C.sys
*** ERROR: Module load completed but symbols could not be loaded for MRVW24C.sys
Probably caused by : MRVW24C.sys ( MRVW24C+272f1 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure.  The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: fffff8015f30b560, Address of the trap frame for the exception that caused the bugcheck
Arg3: fffff8015f30b4b8, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved

Debugging Details:
------------------


TRAP_FRAME:  fffff8015f30b560 -- (.trap 0xfffff8015f30b560)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffe000465fe008 rbx=0000000000000000 rcx=0000000000000003
rdx=ffffe000465fdd10 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8015daf7d01 rsp=fffff8015f30b6f0 rbp=0000000000000000
 r8=ffffe000465fe1e8  r9=ffffe000465fdd10 r10=ffffe00046866bc0
r11=fffff8015f30b780 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up di ng nz na pe cy
nt!ExInterlockedInsertTailList+0xad:
fffff801`5daf7d01 cd29            int     29h
Resetting default scope

EXCEPTION_RECORD:  fffff8015f30b4b8 -- (.exr 0xfffff8015f30b4b8)
ExceptionAddress: fffff8015daf7d01 (nt!ExInterlockedInsertTailList+0x00000000000000ad)
   ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
  ExceptionFlags: 00000001
NumberParameters: 1
   Parameter[0]: 0000000000000003

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  LIST_ENTRY_CORRUPT

BUGCHECK_STR:  0x139

PROCESS_NAME:  steamwebhelper

CURRENT_IRQL:  2

ERROR_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.

EXCEPTION_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.

EXCEPTION_PARAMETER1:  0000000000000003

ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre

DPC_STACK_BASE:  FFFFF8015F30CFB0

LAST_CONTROL_TRANSFER:  from fffff8015db62ae9 to fffff8015db56fa0

STACK_TEXT:  
fffff801`5f30b238 fffff801`5db62ae9 : 00000000`00000139 00000000`00000003 fffff801`5f30b560 fffff801`5f30b4b8 : nt!KeBugCheckEx
fffff801`5f30b240 fffff801`5db62e10 : 000026c5`00005000 00000000`00000000 00000000`00000001 00000000`000005b4 : nt!KiBugCheckDispatch+0x69
fffff801`5f30b380 fffff801`5db62034 : 00000000`0000ffff ffffe000`440adf30 00000000`00000000 fffff800`78b1d0de : nt!KiFastFailDispatch+0xd0
fffff801`5f30b560 fffff801`5daf7d01 : ffffe000`47d5c3d1 00000000`00000014 ffffe000`47ca7030 fffff800`78505887 : nt!KiRaiseSecurityCheckFailure+0xf4
fffff801`5f30b6f0 fffff800`79c2e2f1 : ffffe000`465fd000 ffffe000`47af2e20 00000000`00000000 ffffe000`46add590 : nt!ExInterlockedInsertTailList+0xad
fffff801`5f30b730 ffffe000`465fd000 : ffffe000`47af2e20 00000000`00000000 ffffe000`46add590 00000000`00000000 : MRVW24C+0x272f1
fffff801`5f30b738 ffffe000`47af2e20 : 00000000`00000000 ffffe000`46add590 00000000`00000000 fffff800`79c3338e : 0xffffe000`465fd000
fffff801`5f30b740 00000000`00000000 : ffffe000`46add590 00000000`00000000 fffff800`79c3338e ffffe000`47ca7030 : 0xffffe000`47af2e20


STACK_COMMAND:  kb

FOLLOWUP_IP: 
MRVW24C+272f1
fffff800`79c2e2f1 ??              ???

SYMBOL_STACK_INDEX:  5

SYMBOL_NAME:  MRVW24C+272f1

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: MRVW24C

IMAGE_NAME:  MRVW24C.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  472551f7

FAILURE_BUCKET_ID:  0x139_3_MRVW24C+272f1

BUCKET_ID:  0x139_3_MRVW24C+272f1

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:0x139_3_mrvw24c+272f1

FAILURE_ID_HASH:  {405011a6-34ec-30a6-31a9-53275dcd66c7}

Followup: MachineOwner
---------

0: kd> lmvm MRVW24C
start             end                 module name
fffff800`79c07000 fffff800`79c5a200   MRVW24C  T (no symbols)           
    Loaded symbol image file: MRVW24C.sys
    Image path: \SystemRoot\system32\DRIVERS\MRVW24C.sys
    Image name: MRVW24C.sys
    Timestamp:        Mon Oct 29 11:22:31 2007 (472551F7)
    CheckSum:         00055C61
    ImageSize:        00053200
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

According to the results, it seems like caused by MRVM24C.sys. Generally speaking, this file belongs to Marvell Semiconductor. Therefore, you can try to upgrade or reinstall Network Adapter driver for test.

In addition, in my opinion, this problem also can be caused by other application conflict. You can check if you installed any application before this problem occures, please try to disable Security application for test.

Free Windows Admin Tool Kit Click here and download it now
November 4th, 2014 2:32am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics