Hardware FixRecommendedDevice not working? Your driver may be the problemCheck updates for common hardware issues.Fix DriversHalloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsPC HealthRecommendedCrashes, freezes, slowdowns? Check your PC nowSpot repairable issues before they interrupt work.Check PC×
FREEDOM251

Freedom251 › Blog › Blue Screen

How to Fix ntoskrnl.exe BSOD Errors in Windows 10

By Freedom251 Team · · 10 min read

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

ntoskrnl.exe is the Windows NT kernel, not usually the thing that needs replacing. When a blue-screen report names it, Windows was executing kernel code when the system stopped; the underlying trigger is more often a third-party driver, faulty hardware, storage trouble, or damaged system files. Record the exact stop code, undo recent changes, test drivers and hardware, repair Windows files, and inspect a memory dump before considering a reset or reinstall.

What ntoskrnl.exe means—and what it does not mean

The filename is short for Windows NT kernel executable. The kernel starts during Windows boot and manages core work such as memory, processes, hardware access, and communication between drivers and the operating system. A dump viewer or utility such as BlueScreenView may show ntoskrnl.exe because that module was running when Windows detected a condition that made continued operation unsafe.

As an Amazon Associate I earn from qualifying purchases.

That module name is therefore a location in the failing call path, not a diagnosis. Microsoft describes stop errors as conditions that compromise safe system operation and notes that a hardware device, its driver, or related software can cause one. In Microsoft’s current stop-code troubleshooting guidance, accessed in 2026, the reported causes break down as approximately 70% third-party driver code, 10% hardware, 5% Microsoft code, and 15% unknown because memory is too corrupted to analyze. Replacing the kernel file on the basis of its name can leave the real problem untouched and can damage Windows.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Start with evidence, not a file download

Before changing anything, write down the information that can distinguish a driver problem from a hardware or boot problem:

#1 Best Overall
Ralix Compatible with Windows Emergency Boot USB - for Windows 98, 2000, XP, Vista, 7, 10 PC Repair USB All in One Tool (Latest Version)
  • Emergency Boot USB compatible with Windows 98, 2000, XP, Vista, 7, and 10. It has never ben so easy to repair a hard drive or recover lost files
  • Plug and Play type usb - Just boot up the usb and then follow the onscreen instructions for ease of use
  • Boots up any PC or Laptop model and brand.
  • Virus and Malware Removal made easy for you
  • This is your one stop shop for PC Repair of any need!
  • The complete stop code, such as PAGE_FAULT_IN_NONPAGED_AREA, MEMORY_MANAGEMENT, or IRQL_NOT_LESS_OR_EQUAL.
  • Any “What failed” driver filename shown on the blue screen.
  • Whether the crash occurs during startup, gaming, sleep/wake, printing, networking, or another repeatable activity.
  • The date of a recent Windows update, driver installation, BIOS/UEFI change, or newly connected device.
  • Whether Windows restarts automatically, freezes, loops at boot, or reaches the desktop.

The stop code is more useful than the generic ntoskrnl.exe label. If the blue screen disappears too quickly, open Settings > System > About > Advanced system settings. In Startup and Recovery, select Settings, clear Automatically restart, and leave Write debugging information set to an automatic or small memory dump. This gives you time to read the code and creates evidence for recurring failures.

Follow this repair sequence

1. Remove a recent change

Shut down and disconnect hardware added immediately before the first crash: USB hubs, external drives, docks, graphics cards, memory modules, Wi-Fi adapters, or printers. Reconnect one item at a time only after the system is stable. If the problem began after a driver or Windows update, plan to roll that change back in Safe Mode rather than repeatedly rebooting into a crash loop.

2. Boot Windows 10 into Safe Mode

Safe Mode loads a minimal set of drivers and services, which helps separate a basic Windows failure from a third-party startup component.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  1. From the sign-in screen or desktop, hold Shift while selecting Power > Restart.
  2. Choose Troubleshoot > Advanced options > Startup Settings > Restart.
  3. Press 4 for Safe Mode or 5 for Safe Mode with Networking. Use networking only when you need it; the smaller driver set is preferable for diagnosis.

If Windows cannot reach those menus, interrupt startup two or three times by holding the power button when the spinning dots appear. Windows should enter the recovery environment on the next boot. A BitLocker recovery key may be required on encrypted systems.

3. Inspect, update, or roll back drivers

In Safe Mode, open Device Manager by right-clicking Start. Expand categories related to the activity that triggers the crash—Display adapters, Network adapters, Storage controllers, Sound, video and game controllers, Bluetooth, and Universal Serial Bus controllers. A yellow exclamation mark identifies a device with a reported problem.

  1. Right-click the suspect device and choose Properties. Read the status and the Driver tab’s provider, date, and version.
  2. If the crash followed an update, choose Roll Back Driver when Windows offers it. Confirm the reason and restart normally.
  3. If rollback is unavailable, select Update Driver > Search automatically for drivers, or download the appropriate Windows 10 driver from the computer or component manufacturer’s support page.
  4. For isolation, choose Disable device and restart. If crashes stop, re-enable it and install a known-good driver; do not leave essential storage, chipset, or security devices disabled.
  5. Use Uninstall device only when you intend to reinstall the driver. If offered, select the option to remove the driver package, then install the manufacturer’s current package after rebooting.

Do not install a random driver identified only by a search result. Match the exact computer model or component, Windows 10 edition, and 32-bit or 64-bit architecture. If no update exists, Microsoft’s advanced guidance allows disabling the related service or driver temporarily to confirm the cause; document the change so it can be reversed.

Rank #2
Ralix Reinstall USB Compatible with Windows 10 All Versions 32/64 bit. Recover, Restore, Repair Boot USB, and Install to Factory Default Will Fix PC Easy!
  • Comprehensive Solution: This Windows 10 reinstall DVD provides a complete solution for resolving various system issues, including crashes, malware infections, boot failures, and performance slowdowns. Repair, Recover, Restore, and Reinstall any version of Windows.
  • USB will work on any type of computer (make or model). Creates a new copy of Windows! DOES NOT INCLUDE product key.
  • Windows not starting up? NT Loader missing? Repair Windows Boot Manager (BOOTMGR), NTLDR, and so much more with this DVD. Clean Installation: Allows you to perform a fresh installation of Windows 11 64-bit, effectively wiping the system and starting from a clean slate.
  • Step by Step instructions on how to fix Windows 10 issues. Whether it be broken, viruses, running slow, or corrupted our disc will serve you well
  • Please remember that this DVD does not come with a KEY CODE. You will need to obtain a Windows Key Code in order to use the reinstall option

4. Install Windows updates and verify free space

In normal mode, open Settings > Update & Security > Windows Update, select Check for updates, install available quality and driver updates, and restart as requested. Also check View update history for the update that preceded the first crash. Microsoft recommends keeping roughly 10% to 15% of the system drive free; low space can prevent updates, paging, and dump creation. Use Settings > System > Storage to see capacity and remove files you recognize, or move personal files to another drive. Do not delete unknown files from Windows folders.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

5. Test memory (RAM)

Unstable RAM can corrupt the data a dump needs, producing an apparently random ntoskrnl.exe failure. Save your work, press Win+R, enter mdsched.exe, and choose Restart now and check for problems. The test runs before Windows starts. After you sign in, open Event Viewer, select Windows Logs > System, choose Find, and search for MemoryDiagnostics-Results.

If errors are reported, power off, unplug the machine, and follow the manufacturer’s service instructions to reseat modules. Test one module and one slot at a time if the documentation permits. Use the computer or motherboard manufacturer’s memory diagnostic as a second check. Any repeatable memory error is a hardware issue: replace the failing module or have the system serviced before trusting further software repairs.

6. Check storage and the PAGE_FAULT_IN_NONPAGED_AREA case

PAGE_FAULT_IN_NONPAGED_AREA can result from a named driver, defective memory, or storage corruption. Note the driver shown on the blue screen, then test each possibility rather than assuming the code identifies one component.

  1. Back up important files first.
  2. Open Command Prompt (Admin) or Windows PowerShell (Admin) from the Win+X menu.
  3. Run chkdsk C: /f /r when the system drive is the suspected volume. Windows may schedule the check for the next restart; type Y and reboot. The /r scan can take a long time, especially on a large or failing disk.
  4. Run the storage manufacturer’s diagnostic utility when available, and review its reported health or error codes.

Stop using a drive that is clicking, disappearing, or rapidly accumulating errors and copy data from it before repeated scans. A file-system repair cannot make failing hardware reliable.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

7. Update BIOS, UEFI, and device firmware

Firmware controls how the motherboard, processor, memory, storage, and peripherals interact before and during Windows startup. Obtain BIOS/UEFI and firmware packages only from the computer or component manufacturer, verify the exact model and revision, connect reliable power, and follow its instructions. Do not interrupt a firmware update. If crashes began immediately after an update, check the manufacturer’s documented rollback or recovery procedure instead of applying an unrelated version.

8. Repair Windows component and system files

Damaged protected files can contribute to stop errors, although a clean scan does not prove that RAM, storage, or drivers are healthy. Connect to reliable power and open an elevated command window:

  1. Run DISM /Online /Cleanup-Image /RestoreHealth and wait for it to finish. DISM repairs the component store that Windows uses as a source for protected files.
  2. When DISM reports completion, run sfc /scannow.
  3. Read the final message. “Windows Resource Protection found corrupt files and successfully repaired them” indicates repairs were made; a message that some files could not be repaired calls for the CBS log, another restart, or recovery options rather than an assumption that the problem is solved.

Run the commands in that order. If Windows cannot boot normally, use Troubleshoot > Advanced options > Command Prompt from recovery, but drive letters in that environment may differ from those in normal Windows; identify the Windows volume before attempting offline repairs.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Use a crash dump to identify the real trigger

For repeated crashes, dump analysis is more reliable than a viewer that highlights only the module active at the stop. Small dumps are normally stored in %SystemRoot%Minidump; an automatic or complete memory dump may be written as %SystemRoot%MEMORY.DMP. Copy the newest files to another drive before changing the system.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  1. Install WinDbg through the Windows SDK on a working Windows installation.
  2. Open the dump in WinDbg and configure Microsoft’s public symbol server through the symbol settings. Correct symbols let the debugger translate addresses into meaningful functions.
  3. Run !analyze -v. Note the bug-check code, arguments, “Probably caused by” line, and the process or driver named in the output.
  4. Inspect the call stack and loaded modules rather than accepting the first highlighted filename. A third-party driver near the top of the stack is a stronger lead than ntoskrnl.exe alone.
  5. Compare several dumps. The same driver, device class, or address pattern recurring across files is actionable; unrelated names across heavily corrupted dumps may indicate memory or hardware trouble.

Dump analysis can be difficult, and intermittent hardware faults may not appear in every file. Preserve the original dumps and record driver versions before making changes so you can compare results.

Choose recovery only after backing up

If the computer remains unstable or will not start, use the least destructive option that matches the evidence. Back up personal files first whenever Windows or recovery tools still allow it. A USB flash drive with enough capacity for Windows 10 installation or recovery media can be used to boot the documented Microsoft recovery workflow; the drive itself does not repair the kernel.

Option When it fits Reversibility and risk
System Restore A restore point exists from before the crashes. Usually reversible for system changes; personal files are normally retained, but recently installed applications and drivers may be removed.
Uninstall a recent update The first crash followed a specific Windows quality or feature update. Reversible by reinstalling the update later; keep security implications in mind.
Startup Repair or recovery environment Windows cannot complete startup. Targets boot configuration and startup files; it does not cure failing RAM or a bad driver.
Reset this PC Repairs have failed and you need a fresh Windows installation while retaining a choice of personal files. Applications and settings are removed; the selected reset mode can remove personal data, so back up first.
OEM recovery image You need the manufacturer’s factory software and hardware-specific drivers. Typically returns the system to its factory state and can remove applications and data.
Clean reinstall from installation media Windows is severely damaged or other recovery options fail. Most disruptive: it can erase the system volume and requires reinstalling drivers, applications, and updates.

To reach recovery, hold Shift while selecting Restart, or boot from installation media and choose Repair your computer. Microsoft documents creating bootable media on another working PC. Confirm which partitions and files an option will remove before accepting it; OEM images may include hardware-specific drivers and factory applications.

Quick Recap

Bestseller No. 1
Ralix Compatible with Windows Emergency Boot USB - for Windows 98, 2000, XP, Vista, 7, 10 PC Repair USB All in One Tool (Latest Version)
Ralix Compatible with Windows Emergency Boot USB - for Windows 98, 2000, XP, Vista, 7, 10 PC Repair USB All in One Tool (Latest Version)
Boots up any PC or Laptop model and brand.; Virus and Malware Removal made easy for you; This is your one stop shop for PC Repair of any need!
$16.99
Bestseller No. 3

What not to do

  • Do not download ntoskrnl.exe from a third-party file site or replace it manually. Windows servicing, System Restore, reset, or reinstall provides the supported copy.
  • Do not conclude that the kernel is infected solely because a scanner or dump viewer lists it. Investigate the stop code, signature, file location, driver history, and security software findings separately.
  • Do not repeatedly force power-off during a disk check, update, or firmware flash unless the manufacturer’s recovery instructions explicitly require it.
  • Do not disable security software or random services as a permanent “fix.” A temporary, documented driver isolation test is different from leaving protection disabled.
  • Do not keep using a machine that reports memory errors or a rapidly failing drive; software repairs cannot make defective hardware safe.

Quick decision guide

Observed situation Best next action
One crash after connecting a device Disconnect it, boot Safe Mode, inspect and roll back or reinstall its driver.
Crash names a specific third-party driver Obtain the exact manufacturer’s driver, roll back if timing matches an update, and isolate the device in Device Manager.
Different stop codes, corrupted dumps, or errors in Memory Diagnostics Test and replace RAM or other hardware before spending time on Windows file repair.
PAGE_FAULT_IN_NONPAGED_AREA with disk warnings Back up immediately, run the appropriate disk and manufacturer diagnostics, and plan drive replacement if errors persist.
Windows files are reported corrupt Run DISM, then SFC, restart, and check whether the same stop code returns.
System will not boot after all reversible steps Use System Restore or update removal first, then reset or reinstall only after a verified backup.

As an optional shortcut after the manual checks, Outbyte PC Repair can look for more than 100 common Windows issues, adjust settings, clean temporary and cache files, and provide an app-crash log and other maintenance tools. It runs on Windows 11, 10, 8, and 7; a free trial by category lasts at least two days before a paid subscription. It complements antivirus software rather than replacing it, results vary, and no tool repairs every crash.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Blue ScreenBSODDriver Troubleshootingntoskrnl.exeWindows 10Windows Recovery

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Recommended PC Tool
Recommended PC Tool
Windows Errors? Fix Them Before They SpreadFree repair scan
Outdated Drivers Are Slowing You DownFree scan - exact matches

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.