BSOD 313 (KERNEL_SECURITY_CHECK_FAILURE): causes and diagnosis

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: KERNEL_SECURITY_CHECK_FAILURE the kernel detected corruption or an invalid transition in a protected data structure. Parameter 1 identifies the corruption.

Could be also:
Constant	Type	OS
ERROR_NOT_ALLOWED_ON_SYSTEM_FILE	Win32 error	Windows

Previous	Next
GPIO_CONTROLLER_DRIVER_ERROR	KERNEL_MODE_HEAP_CORRUPTION

KERNEL_SECURITY_CHECK_FAILURE

KERNEL_SECURITY_CHECK_FAILURE meaning

KERNEL_SECURITY_CHECK_FAILURE is bug check 0x00000139. The kernel detected corruption or an invalid transition in a protected data structure. Parameter 1 identifies the corruption type; the dump also provides trap-frame and exception-record context for many variants.

How to analyze KERNEL_SECURITY_CHECK_FAILURE

Use Parameter 1 to select the structure or fast-fail category. For list corruption, inspect both forward and backward links and search earlier execution for double removal, use-after-free, stack object lifetime, or overwrite.

Preserve the complete dump, all four parameters, Windows build, loaded modules, and the event timeline before changing drivers or firmware while investigating KERNEL_SECURITY_CHECK_FAILURE.
Run !analyze -v and follow the parameter-specific objects and the stack associated with KERNEL_SECURITY_CHECK_FAILURE rather than relying only on the symbolic name or a single probable-cause line.
Compare multiple dumps when available; a stable instruction or object path associated with KERNEL_SECURITY_CHECK_FAILURE is stronger evidence than a module that appears only after earlier corruption.

Recovery boundary for KERNEL_SECURITY_CHECK_FAILURE

Repair the component that introduced the inconsistency, not merely the code that detected it. Driver Verifier, special pool, and multiple dumps can move detection closer to the original corruption.

Official references for KERNEL_SECURITY_CHECK_FAILURE

Looking for a different code? Search another status or error code.