Question Kernel-mode Hardware-enforced Stack Protection issue

Gfost73

Reputable
Mar 23, 2019
520
66
5,090
not sure if this is an issue or just a bug with windows 11, in windows defender I am receiving an alert informing me that Kernel-mode Hardware-enforced Stack Protection is off, and when I click "go to settings" I get a page is not available popup. I have tried investigating what this issue could be, and cannot find any real answers, I read that the CPU needs to support Control-flow Enforcement Technology (CET) But cannot find any solid info on whether the Ryzen 5 5600G supports this feature, I have tried to dismiss the alert for it to only come back. I know mt fTmp is on and working. Is this issue simply a bug with windows 11? and how could I make it so it no longer is present, I did read that turning on virtualization had fixed it for some, should i turn that on in my Bios even though I do not use it? (I tried to link a pic of the windows defender but for some reason it is not allowing it to post) so I linked it below Windows Defender My system is a Ryzen 5600G, 32GB XPG DDR4 D60G, Gigabyte B450 AORUS PRO WIFI, and the drives and remaining system are listed in my signature. any help on this issue would be great. thanks in advance

 
When did the alert start?

For example: after some download and install, some update, or configuration change?

Do you have any other AV or malware detection software loaded or available? If so, run that just as a matter of elimination or confirmation.

Anything new, unexpected, or otherwise unidentified running in the background? Either being launched at startup or triggered latter via Task Scheduler.

Look in Reliability History and Update History for additional clues. Reliability History uses a time line format that may indicate some related error codes, warnings, or informational events.

Event Viewer can help as well. Not as user friendly as Reliability History.

To help with Event Viewer:

http://www.tomshardware.com/faq/id-3128616/windows-event-viewer.html

Hopefully there will be some other bit of information that can help identify and resolve whatever is happening.
 
I am not sure when it started, I noticed it the other day though, from online investigation I learned that there was some sort of bug in windows 11 that was causing this issue, however it was also noted that a new update fixed it, I am all up to date with windows, nothing new installed, no other AV or Malware software. checking reliability history, the only critical errors seem to be a few bits of software that crashed and Voice control engine, most seems to be the voice control, but I do have my recording devices disabled so this may make sense for an error. My Ftmp is enabled and working, and if I click device security shows no errors, it also indicates secure boot is fine as well. I am not really sure what else to look for in reliability history, there are other events and warnings there are two windows hardware errors that states. (Investigating indicates the code 144 is GPU related so it may have been registered as an error during driver updates? because my GPU is fine)
Problem Event Name: LiveKernelEvent
Code: 144
Parameter 1: 100a
Parameter 2: ffffe38036ea77b0
Parameter 3: 0
Parameter 4: 0
OS version: 10_0_22621
Service Pack: 0_0
Product: 768_1
OS Version: 10.0.22621.2.0.0.768.101
Locale ID: 4105

other than that the rest of the events seem to be simple software "not responding". Nothing new at startup, I have very few things starting with windows other than what windows starts and basic things like Nvidia control panel, RGB fusion2, Dragon center, The only other 2 startup things I have running is BlueIris ( my security cam software) and HWinfo and a Fan control software.
 
Having the same issue on a Core i7-1165G7 HP laptop with fully updated Win11 home. The "Page not available" popup seems to be a smaller subset of the issues folks are having with Device security. Clicking the "Dismiss" on the warning works but doesn't inspire confidence!
 
  • Like
Reactions: Gfost73
Well, I have made some progress, I decided to try to enable SVM in the bios, which then enabled the core isolation option in the windows security, with an error " Memory integrity" is off, when I attempt to turn it on, I get a "driver incompatible error" for HHTHid.sys, then using PowerShell as admin I ran
" dism /online /get-drivers /format:table "
to locate the drivers publisher name which was oem7.inf I then ran
"pnputil /delete-driver oem7.inf /uninstall /force"
I have now successfully enabled kernel mode hardware enforced stack protection and memory integrity.

** Edit, have done a couple reboots since deleting the driver all seems to be working as it should and no hardware errors in device manager so I would think this issue is fixed. THE DRIVER was a driver for my RED DRAGON mouse.
 
Last edited: