Help with several BSOD - analyzing minidump

CESAR VIEIRA 20 Reputation points
2026-07-25T22:54:34.39+00:00

Hi, from some time I'm getting some BSOD, which I get almost everytime I try to play a game (GTA V, Fortnite, etc).

Usually it's IRQL_NOT_LESS_OR_EQUAL, but got also a DRIVER_OVERRAN_STACK_BUFFER.

I tried to install older NVidia drivers, with same errors.

I used WinDbg to analyze the minidump from the last error but I don't know what to look :(

The result I got was this one:

nt!KeBugCheckEx:
fffff801`a6cf9250 48894c2408      mov     qword ptr [rsp+8],rcx ss:0018:fffff38f`c1ae6320=00000000000000f7
4: kd> !analyze -v
Loading Kernel Symbols
...............................................................
................................................................
................................................................
........................................
Loading User Symbols
PEB is paged out (Peb.Ldr = 00000074`05c97018).  Type ".hh dbgerr001" for details
Loading unloaded module list
...............
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_OVERRAN_STACK_BUFFER (f7)
A driver has overrun a stack-based buffer.  This overrun could potentially
allow a malicious user to gain control of this machine.
DESCRIPTION
A driver overran a stack-based buffer (or local variable) in a way that would
have overwritten the function's return address and jumped back to an arbitrary
address when the function returned.  This is the classic "buffer overrun"
hacking attack and the system has been brought down to prevent a malicious user
from gaining complete control of it.
Do a kb to get a stack backtrace -- the last routine on the stack before the
buffer overrun handlers and BugCheck call is the one that overran its local
variable(s).
Arguments:
Arg1: 00003e4a34a75e23, Actual security check cookie from the stack
Arg2: 0000000000000000, Expected security check cookie
Arg3: ffffc1b5cb58a1dc, Complement of the expected security check cookie
Arg4: 0000000000000000, zero

Debugging Details:
------------------


KEY_VALUES_STRING: 1

    Key  : Analysis.CPU.mSec
    Value: 2000

    Key  : Analysis.Elapsed.mSec
    Value: 2546

    Key  : Analysis.IO.Other.Mb
    Value: 0

    Key  : Analysis.IO.Read.Mb
    Value: 1

    Key  : Analysis.IO.Write.Mb
    Value: 0

    Key  : Analysis.Init.CPU.mSec
    Value: 625

    Key  : Analysis.Init.Elapsed.mSec
    Value: 4002

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 87

    Key  : Analysis.Version.DbgEng
    Value: 10.0.29617.1000

    Key  : Analysis.Version.Description
    Value: 10.2604.29.1 amd64fre

    Key  : Analysis.Version.Ext
    Value: 1.2604.29.1

    Key  : Bugcheck.Code.LegacyAPI
    Value: 0xf7

    Key  : Bugcheck.Code.TargetModel
    Value: 0xf7

    Key  : Dump.Attributes.AsUlong
    Value: 0x21008

    Key  : Dump.Attributes.DiagDataWrittenToHeader
    Value: 1

    Key  : Dump.Attributes.ErrorCode
    Value: 0x0

    Key  : Dump.Attributes.KernelGeneratedTriageDump
    Value: 1

    Key  : Dump.Attributes.LastLine
    Value: Dump completed successfully.

    Key  : Dump.Attributes.ProgressPercentage
    Value: 0

    Key  : Failure.Bucket
    Value: 0xF7_MISSING_GSFRAME_nt!_report_gsfailure

    Key  : Failure.Hash
    Value: {82d2c1b5-b0cb-60a5-9a5d-78c8c4284f84}


BUGCHECK_CODE:  f7

BUGCHECK_P1: 3e4a34a75e23

BUGCHECK_P2: 0

BUGCHECK_P3: ffffc1b5cb58a1dc

BUGCHECK_P4: 0

FILE_IN_CAB:  072526-22875-01.dmp

DUMP_FILE_ATTRIBUTES: 0x21008
  Kernel Generated Triage Dump

FAULTING_THREAD:  ffff928e90978080

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXPNP: 1 (!blackboxpnp)


BLACKBOXWINLOGON: 1 (!blackboxwinlogon) (!blackboxwinlogonnotify)


CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  dwm.exe

STACK_TEXT:  
fffff38f`c1ae6318 fffff801`a6d37c75     : 00000000`000000f7 00003e4a`34a75e23 00000000`00000000 ffffc1b5`cb58a1dc : nt!KeBugCheckEx
fffff38f`c1ae6320 fffff801`a72d925b     : 00000000`00000157 00000000`00000000 fffff801`43d60250 00000000`00000000 : nt!_report_gsfailure+0x25
fffff38f`c1ae6360 fffff801`a6aceaec     : fffff38f`c1ae6950 fffff801`a6a87a70 ffff928e`942fe868 ffff928e`942fe870 : nt!EtwpWriteUserEvent+0x19bb
fffff38f`c1ae6900 fffff801`a6ebfb44     : ffff928e`90978080 000001cc`772a0700 ffff928e`90978080 00000000`00000000 : nt!NtTraceEvent+0x24c
fffff38f`c1ae6ae0 00007ffa`6a560c14     : 00007ffa`6a41b241 00000002`00009443 000001cc`667710e0 000001cc`66788bd0 : nt!KiSystemServiceExitPico+0x499
00000074`0607f468 00007ffa`6a41b241     : 00000002`00009443 000001cc`667710e0 000001cc`66788bd0 00000074`0607f570 : 0x00007ffa`6a560c14
00000074`0607f470 00000002`00009443     : 000001cc`667710e0 000001cc`66788bd0 00000074`0607f570 00000000`00000001 : 0x00007ffa`6a41b241
00000074`0607f478 000001cc`667710e0     : 000001cc`66788bd0 00000074`0607f570 00000000`00000001 000001cc`00000001 : 0x00000002`00009443
00000074`0607f480 000001cc`66788bd0     : 00000074`0607f570 00000000`00000001 000001cc`00000001 00000002`ab5ac830 : 0x000001cc`667710e0
00000074`0607f488 00000074`0607f570     : 00000000`00000001 000001cc`00000001 00000002`ab5ac830 00007ffa`62448506 : 0x000001cc`66788bd0
00000074`0607f490 00000000`00000001     : 000001cc`00000001 00000002`ab5ac830 00007ffa`62448506 000001cc`773ea478 : 0x00000074`0607f570
00000074`0607f498 000001cc`00000001     : 00000002`ab5ac830 00007ffa`62448506 000001cc`773ea478 000001cc`773ea478 : 0x1
00000074`0607f4a0 00000002`ab5ac830     : 00007ffa`62448506 000001cc`773ea478 000001cc`773ea478 00000074`0607f6e0 : 0x000001cc`00000001
00000074`0607f4a8 00007ffa`62448506     : 000001cc`773ea478 000001cc`773ea478 00000074`0607f6e0 00000000`00000000 : 0x00000002`ab5ac830
00000074`0607f4b0 000001cc`773ea478     : 000001cc`773ea478 00000074`0607f6e0 00000000`00000000 00000000`00000000 : 0x00007ffa`62448506
00000074`0607f4b8 000001cc`773ea478     : 00000074`0607f6e0 00000000`00000000 00000000`00000000 00000000`00000000 : 0x000001cc`773ea478
00000074`0607f4c0 00000074`0607f6e0     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x000001cc`773ea478
00000074`0607f4c8 00000000`00000000     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00000074`0607f6e0


SYMBOL_NAME:  nt!_report_gsfailure+25

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

IMAGE_VERSION:  10.0.26100.8894

STACK_COMMAND: .process /r /p 0xffff928e907ec080; .thread /r /p 0xffff928e90978080 ; kb

BUCKET_ID_FUNC_OFFSET:  25

FAILURE_BUCKET_ID:  0xF7_MISSING_GSFRAME_nt!_report_gsfailure

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {82d2c1b5-b0cb-60a5-9a5d-78c8c4284f84}

Followup:     MachineOwner
---------


Windows for home | Windows 11 | Performance and system failures
0 comments No comments

Answer accepted by question author
Ivan B 123.4K Reputation points Independent Advisor
2026-07-26T01:19:54.0633333+00:00

Hi,

I checked the minidumps, and they indicate failures involving the kernel and, in some cases, the audio driver.

What is your GPU model?

Did you make any changes to the BIOS?

Thanks.

Was this answer helpful?

1 person found this answer helpful.

2 additional answers

Sort by: Newest
  1. CESAR VIEIRA 20 Reputation points
    2026-07-26T00:05:23.9133333+00:00

    https://transfer.it/t/8CZfr2xXnBxC

    Link to minidumps.

    And msinfo print

    User's image

    Was this answer helpful?

    0 comments No comments

  2. Ivan B 123.4K Reputation points Independent Advisor
    2026-07-25T23:35:49.4633333+00:00

    Hi ,

    Search for msinfo32.exe in the search bar, take a screenshot, and post it here so we can see the correct laptop model or desktop configuration.

    Please go to the c:\windows\minidump folder, copy the files to your desktop, upload them to OneDrive or Google Drive, and post the link here for analysis.

    Thanks

    Was this answer helpful?

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.