UK tech experts · info@vividrepairs.co.uk
Vivid Repairs
KMODE Exception Not Handled Windows 11? Fix Guide
Fix It Yourself · Troubleshooting

KMODE Exception Not Handled Windows 11? Fix Guide

Updated 16 August 202611 min read
As an Amazon Associate, we may earn from qualifying purchases. Our ranking is independent.

That blue screen is almost certainly a driver problem. KMODE_EXCEPTION_NOT_HANDLED (stop code 0x1E) means a kernel-mode process threw an exception Windows couldn't handle, and in the vast majority of cases it traces back to one dodgy driver. Most people fix this in under 30 minutes without touching a repair shop. Here's exactly what to do.

TL;DR

KMODE_EXCEPTION_NOT_HANDLED on Windows 11 is almost always caused by a faulty driver, corrupted system files, or bad RAM. Update or roll back the driver shown on the blue screen first. If that doesn't work, run sfc /scannow and DISM, then test your RAM and drive. This guide covers every fix in order.

⏱️ 13 min read ✅ High success rate 📅 Updated August 2026

Key Takeaways

  • KMODE_EXCEPTION_NOT_HANDLED is stop code 0x1E. The.sys file on the blue screen tells you which driver caused it.
  • Driver updates or rollbacks fix the majority of cases. Start there.
  • SFC and DISM repair corrupted Windows files and are safe to run on any system.
  • If software fixes fail, test your RAM and drive. Faulty hardware causes this too.
  • You won't lose your files using any fix in this guide except a clean reinstall.

At a Glance

  • Difficulty: Intermediate
  • Time Required: 30 to 60 mins
  • Success Rate: High for driver and file repair fixes

What Causes KMODE_EXCEPTION_NOT_HANDLED?

The error name tells you almost everything. Kernel mode is the part of Windows that has direct access to hardware and system memory. When a driver running in kernel mode hits a problem it can't recover from, Windows throws stop code 0x1E rather than letting the crash corrupt your data silently. According to Microsoft's own documentation on bug check 0x1E, the most common trigger is a kernel-mode driver accessing an invalid memory address.

The most frequent culprit, by a long way, is a graphics driver. NVIDIA's nvlddmkm.sys shows up constantly in crash logs. Intel's igdkmd64.sys is another regular offender, especially after Windows updates push a new graphics stack that doesn't quite agree with older hardware. Network drivers (tcpip.sys, ndis.sys) come up third. So if you saw a.sys filename on the blue screen, that's your starting point. If you missed it, don't worry. Event Viewer will have it.

Corrupted Windows system files are the second most common cause. Incomplete updates, sudden power cuts, or a drive that's quietly developing bad sectors can all leave system files in a broken state. The kernel tries to load something, finds it's damaged, and has nowhere to go. That's your blue screen.

Hardware is the third category. Faulty RAM is a classic cause of KMODE_EXCEPTION_NOT_HANDLED because bad memory modules cause exactly the kind of access violations the kernel can't handle. A failing SSD or hard drive with bad sectors does the same thing. And if you've been overclocking your CPU or GPU, that instability under load will show up here too.

Malware is less common but worth mentioning. Some infections inject malicious kernel-mode drivers or corrupt system files directly. If your BSOD started appearing alongside other odd behaviour (slow performance, strange processes in Task Manager, browser redirects), run a full scan before anything else. Corrupted files from malware can also cause related Windows problems like copy and paste not working or other system functions going unreliable.

One more thing: if you recently added new hardware, a USB device, or even a new peripheral, that can introduce an incompatible driver. Disconnect everything non-essential before you start troubleshooting.

KMODE_EXCEPTION_NOT_HANDLED Quick Fix: Sort the Driver First

This fixes the problem for the majority of people. Do this before anything else.

1

Update or Roll Back the Problematic Driver Easy

  1. Find the driver name
    Check the blue screen for a.sys filename. If you missed it, press Win + X, open Event Viewer, go to Windows Logs > System, and look for critical errors at the time of the crash. Note the driver filename.
  2. Open Device Manager
    Press Win + X and select Device Manager. Expand Display adapters, Network adapters, and Storage controllers. These are the most common problem areas.
  3. Roll back if the crash started after an update
    Right-click the suspect device, choose Properties, click the Driver tab, then Roll Back Driver. This restores the previous version. Only available if a previous version exists.
  4. Update if no rollback is available
    Right-click the device, choose Update driver, then Search automatically for drivers. For graphics cards, go directly to the manufacturer: NVIDIA, AMD, or Intel. Download and install manually.
  5. Restart and test
    Reboot and use the PC normally for 10 to 15 minutes, including whatever task was triggering the BSOD. If it's stable, you're sorted.
If the system stays up without a blue screen, the driver was the cause. Keep an eye on it after future Windows updates.
Can't boot into Windows normally? Hold Shift and click Restart from the login screen. Go to Troubleshoot, Advanced options, Startup Settings, Restart, then press F4 for Safe Mode. Run Device Manager from there.
Always download drivers from official manufacturer websites. Third-party driver update tools vary wildly in quality and some bundle unwanted software.

More KMODE_EXCEPTION_NOT_HANDLED Fixes: Repair System Files

If the driver fix didn't hold, or you can't identify a specific driver, corrupted system files are the next most likely cause. Windows has two built-in tools for this: SFC (System File Checker) and DISM (Deployment Image Servicing and Management). Run them in order.

2

Run SFC and DISM to Repair Windows Easy

  1. Open Terminal as Administrator
    Press Win + X and select Terminal (Admin). Click Yes if UAC prompts. This must be run as admin or the scans won't have permission to repair files.
  2. Run System File Checker
    Type sfc /scannow and press Enter. Don't close the window. This takes 15 to 30 minutes. It will scan every protected system file and replace anything corrupted from a cached copy. You'll see one of three messages: no integrity violations found, repairs were made, or it couldn't repair everything (that last one means DISM is needed).
  3. Run DISM repair
    Type DISM /Online /Cleanup-Image /RestoreHealth and press Enter. This pulls repair files from Microsoft's servers via Windows Update, so you need an internet connection. Takes 20 to 40 minutes. Don't interrupt it.
  4. Restart, then run SFC again
    After reboot, open Terminal as Admin again and run sfc /scannow one more time. If DISM did its job, SFC should now report everything is clean.
SFC reports 'Windows Resource Protection did not find any integrity violations' or 'successfully repaired'. DISM reports 'The restore operation completed successfully'.
Do not interrupt SFC or DISM mid-scan. On a laptop, plug into mains power first. Interrupting these scans can cause additional file corruption.

According to Microsoft's support documentation on SFC, if the tool reports it cannot repair certain files, you may need to run DISM first to restore the repair source, then run SFC again. That's why the order matters.

One thing worth knowing: if DISM fails with an error about Windows Update, your Windows Update service might be disabled or broken. Open services.msc, find Windows Update, and make sure it's set to Automatic and running. Then try DISM again.

Advanced KMODE_EXCEPTION_NOT_HANDLED Fixes: Test Your Hardware

Software fixes didn't sort it? Then the problem is likely physical. RAM and drives are the two most common hardware causes of KMODE_EXCEPTION_NOT_HANDLED. Both are testable without any specialist equipment.

3

Test RAM with Windows Memory Diagnostic Intermediate

  1. Open Windows Memory Diagnostic
    Press Win + S and search for Windows Memory Diagnostic. Select Restart now and check for problems. Save any open work first.
  2. Wait for the test to complete
    The PC restarts and runs memory tests before Windows loads. This takes 10 to 20 minutes. You'll see a progress bar. Don't interrupt it.
  3. Check results
    After reboot, a notification should appear with the results. If you miss it, open Event Viewer > Windows Logs > System and look for source MemoryDiagnostics-Results. Any errors mean your RAM is faulty and needs replacing.
Results show 'No memory errors were detected'. If errors appear, the RAM module needs replacing.
For more thorough RAM testing, use MemTest86 (free, bootable from USB). Run at least 4 complete passes or leave it overnight. Windows Memory Diagnostic is good but MemTest86 catches more subtle faults. See Tom's Hardware's RAM guide for help identifying compatible replacement modules.
4

Check the Drive with CHKDSK Intermediate

  1. Open Command Prompt as Administrator
    Press Win + X, select Terminal (Admin).
  2. Schedule CHKDSK
    Type chkdsk C: /f /r and press Enter. When asked to schedule on next restart, type Y and press Enter. Then restart.
  3. Let it run
    CHKDSK runs before Windows loads. On a large drive this can take 1 to 5 hours. Don't interrupt it. It checks for bad sectors and file system errors, and repairs what it can.
  4. Review results
    Open Event Viewer > Windows Logs > Application. Look for source Wininit. The entry will show the full CHKDSK report including how many bad sectors were found.
CHKDSK reports 0 bad sectors and no file system errors. If bad sectors are found, back up your data immediately and consider replacing the drive.
If CHKDSK finds bad sectors, treat the drive as failing. Back up everything before doing anything else. Drives with bad sectors can deteriorate quickly.
5

Strip Back to Minimal Hardware Easy

  1. Disconnect all non-essential peripherals
    Shut down. Unplug external drives, printers, USB hubs, and any devices you don't need to boot. Leave only keyboard, mouse, and monitor.
  2. Disable overclocking
    If you've overclocked your CPU or GPU, reset to stock speeds in BIOS/UEFI. Overclocking instability under load is a known trigger for KMODE_EXCEPTION_NOT_HANDLED, particularly during gaming.
  3. Test stability
    Use the PC normally for 30 minutes including whatever task triggered the BSOD. If it's stable, reconnect devices one at a time until the crash returns. That device (or its driver) is the problem.
System runs without a blue screen after removing peripherals. Reconnect devices one by one to identify the faulty one.

This kind of peripheral-related BSOD is more common than people expect. A dodgy USB hub, a printer with a bad driver, or even some wireless receivers can load kernel-mode drivers that cause exactly this error. I've seen it happen with budget USB audio interfaces more than once. Similar driver conflicts can also cause issues like headphones not working on Windows or the WiFi button disappearing in Windows 11, because the same driver stack handles multiple devices.

If you've tried everything above and the BSOD keeps coming back, the nuclear option is a Windows 11 repair install. Download the Windows 11 ISO from Microsoft, run setup.exe from within Windows, and choose to keep your personal files and apps. It reinstalls the entire Windows system layer without wiping your data. This fixes corruption that SFC and DISM can't reach. A full clean install should genuinely be the last resort, not the first thing you try. And if files have gone missing during all this, our guide on recovering disappeared folders in Windows covers your options there.

Preventing KMODE_EXCEPTION_NOT_HANDLED Coming Back

Once you've fixed it, here's how to stop it happening again. In order of importance:

Keep drivers current, but don't blindly install every update. Windows Update sometimes pushes graphics driver updates that aren't quite ready. If a BSOD appears within 24 hours of an update, roll back immediately. For graphics cards especially, check NVIDIA, AMD, or Intel's release notes before updating manually.

Disable Fast Startup. This is a hidden culprit for a lot of Windows 11 instability. Go to Control Panel, Power Options, then 'Choose what the power buttons do', then 'Change settings that are currently unavailable', and untick 'Turn on fast startup'. Fast Startup doesn't do a full shutdown, which means driver state from the previous session can carry over and cause problems.

Run SFC monthly. Takes 20 minutes and catches file corruption before it becomes a blue screen. Set a calendar reminder. It's the kind of boring maintenance that actually prevents problems.

Don't overclock unless you know what you're doing. If you're gaming and hitting BSODs under load, reset to stock CPU and GPU speeds first. Stability matters more than a 5% performance gain.

Use a surge protector. Power cuts and surges during writes are a real cause of file system corruption. A basic surge protector costs under £20 and can prevent the kind of drive damage that leads to KMODE_EXCEPTION_NOT_HANDLED weeks later.

Keep 20GB free on your system drive. Windows needs working space for updates, temp files, and page file operations. Running tight on space increases the risk of file system errors.

KMODE_EXCEPTION_NOT_HANDLED Summary

KMODE_EXCEPTION_NOT_HANDLED is a kernel-level crash, stop code 0x1E, and it's almost always caused by a driver, corrupted system files, or faulty hardware. Start with the driver shown on the blue screen, update or roll it back, and restart. If that doesn't fix it, run SFC and DISM to repair Windows system files. If the BSOD keeps coming back, test your RAM with Windows Memory Diagnostic and your drive with CHKDSK. Strip back to minimal hardware to rule out peripherals. In the vast majority of cases, one of these steps will sort KMODE_EXCEPTION_NOT_HANDLED without you losing a single file or spending a penny on repairs.

Quick Reference

  • Stop code 0x1E. Check the.sys filename on the blue screen first.
  • Fix 1: Update or roll back the driver in Device Manager.
  • Fix 2: Run sfc /scannow then DISM /Online /Cleanup-Image /RestoreHealth.
  • Fix 3: Run Windows Memory Diagnostic and CHKDSK.
  • Fix 4: Disconnect peripherals and disable overclocking.
  • Last resort: Windows 11 repair install (keeps your files).

Frequently Asked Questions

It means a kernel-mode process (usually a driver) threw an exception that Windows could not handle. Stop code 0x1E. The kernel has no safe way to recover, so it crashes the system rather than risk data corruption. The .sys file named on the blue screen tells you which driver caused it.

Yes. Driver updates, SFC/DISM scans, and hardware tests all preserve your files completely. Only a clean Windows reinstall risks data loss, and that should be a last resort. Even a repair install keeps your personal files and apps intact.

Force-shutdown your PC three times during the boot process. Windows will automatically load the Recovery Environment. From there go to Troubleshoot, then Advanced options, then Startup Settings, then Restart. Press F4 for Safe Mode or F5 for Safe Mode with Networking.

That file is the driver that caused the crash. Common ones: nvlddmkm.sys is NVIDIA graphics, igdkmd64.sys is Intel graphics, tcpip.sys is networking, ntoskrnl.exe points to the Windows kernel itself. Search the filename online to identify the hardware, then update or roll back that specific driver.

Yes. Malware can inject malicious drivers or corrupt system files, both of which trigger kernel exceptions. Run a full scan with Windows Security (Virus and threat protection, then Full scan). If you cannot scan in normal mode, boot to Safe Mode with Networking first.