BSOD MEMORY_MANAGEMENT Windows 10: Stop Code 0x0000001A Fix Guide
Fix BSOD MEMORY_MANAGEMENT (0x0000001A) on Windows 10. Step-by-step guide covering RAM tests, driver fixes, ntoskrnl.exe, and registry repairs.
- Root Cause 1: Faulty or incompatible RAM modules — the most common trigger for stop code 0x0000001A (MEMORY_MANAGEMENT). Bad memory cells corrupt kernel page tables, crashing the OS.
- Root Cause 2: Corrupt or outdated drivers (ntoskrnl.exe, nvlddmkm.sys, fltmgr.sys) overwrite protected memory regions, triggering KERNEL_SECURITY_CHECK_FAILURE or PFN_LIST_CORRUPT alongside MEMORY_MANAGEMENT.
- Root Cause 3: Corrupted Windows system files or a botched Windows Update can trash the memory manager's data structures, producing stop codes 0x0000001A, 0x0000007E, or UNEXPECTED_KERNEL_MODE_TRAP.
- Quick Fix Summary: Run Windows Memory Diagnostic or MemTest86 to rule out hardware faults, update or roll back GPU/chipset drivers, execute SFC /scannow and DISM to repair system files, and check Event Viewer (System log, source BugCheck) for the exact stop code before attempting deeper repairs.
| Method | When to Use | Time | Risk |
|---|---|---|---|
| Windows Memory Diagnostic | First step when BSOD is random or RAM-related | 15–30 min | None |
| MemTest86 (bootable USB) | Deep RAM validation — multiple passes after WMD flags errors | 2–8 hrs | None |
| SFC /scannow + DISM | System files corrupt after bad Windows Update | 20–40 min | Low |
| Driver rollback / DDU uninstall | BSOD started after GPU or chipset driver update | 10–20 min | Low |
| Update drivers via Device Manager | Outdated ntoskrnl, nvlddmkm.sys, fltmgr.sys suspected | 10–30 min | Low |
| Windows Update rollback | BSOD appeared immediately after a cumulative update | 15–30 min | Medium |
| Reseat / replace RAM stick | MemTest86 confirms hardware errors on a specific slot | 5–15 min | Low |
| System Restore | BSOD is recent and restore points exist | 20–40 min | Medium |
| In-place Upgrade Repair | Persistent BSOD, all software fixes exhausted | 1–2 hrs | Medium |
| Clean Install Windows 10 | Hardware confirmed good, OS irreparably corrupt | 2–4 hrs | High (data loss) |
Understanding the MEMORY_MANAGEMENT BSOD (Stop Code 0x0000001A)
When Windows 10 displays the blue screen message "Your PC ran into a problem and needs to restart. Stop code: MEMORY_MANAGEMENT", it has detected a fatal inconsistency in its own memory manager. The full stop code is 0x0000001A. Unlike many BSODs that stem from a single driver, this one sits at the intersection of hardware integrity, driver correctness, and OS file health — making systematic diagnosis essential.
You may also encounter these closely related stop codes during the same troubleshooting session:
- 0x0000007A — KERNEL_DATA_INPAGE_ERROR (disk or RAM I/O failure)
- 0x0000004E — PFN_LIST_CORRUPT (Page Frame Number list damaged)
- 0x00000139 — KERNEL_SECURITY_CHECK_FAILURE
- 0x0000007F — UNEXPECTED_KERNEL_MODE_TRAP
All of these can appear alongside or instead of MEMORY_MANAGEMENT depending on which kernel subsystem catches the corruption first.
Phase 1: Collect the Crash Evidence
Before touching any settings, gather forensic data so you fix the right thing.
Step 1.1 — Read Event Viewer
Press Win + X → Event Viewer → Windows Logs → System. Filter by Source = BugCheck. Each BSOD writes an entry here containing the raw stop code and four parameter values, for example:
The computer has rebooted from a bugcheck. The bugcheck was: 0x0000001a
(0x0000000000041790, 0xfffff6fb40000000, 0x000000000000ffff, 0x0000000000000000).
The first parameter (e.g., 0x41790) narrows the sub-cause inside MEMORY_MANAGEMENT. Common sub-codes:
0x41201— Physical page is corrupt0x41284— Page table is corrupt (often a driver bug)0x41790— PFN (Page Frame Number) list is corrupt0x1— Page pool corruption
Step 1.2 — Analyze the minidump file
Minidumps live at C:\Windows\Minidump\. Install **WinDbg Preview** from the Microsoft Store, then open the most recent .dmp file. Run:
!analyze -v
This prints the faulting module. If it shows ntoskrnl.exe as the culprit, the fault is in the core kernel — RAM or system files. If it shows nvlddmkm.sys (NVIDIA GPU driver), fltmgr.sys (filter manager), or a third-party driver, you have a software target.
Phase 2: Test Your RAM Hardware
Faulty RAM is responsible for the majority of genuine MEMORY_MANAGEMENT crashes. Do not skip this step.
Step 2.1 — Windows Memory Diagnostic (quick test)
Press Win + R, type mdsched.exe, choose Restart now and check for problems. After reboot, results appear in Event Viewer → Windows Logs → System, Source = MemoryDiagnostics-Results.
Step 2.2 — MemTest86 (thorough test)
Download MemTest86 and create a bootable USB. Boot from it and run at least 2 full passes (4+ passes recommended). Any error count > 0 means the RAM stick is defective.
Step 2.3 — Physical reseat
Shut down, disconnect power, open the case. Remove each RAM stick, clean the gold contacts with a dry cloth, and reseat firmly. If you have two sticks, test each slot individually to isolate a bad module or slot.
Phase 3: Repair Windows System Files
Corrupt Windows files — especially those modified by a failed Windows Update — are the second most common cause.
Step 3.1 — SFC scan
Open an elevated Command Prompt (right-click Start → Windows Terminal (Admin)) and run:
sfc /scannow
Wait for 100% completion. If it reports "Windows Resource Protection found corrupt files but was unable to fix some of them", proceed to DISM.
Step 3.2 — DISM repair
DISM /Online /Cleanup-Image /CheckHealth
DISM /Online /Cleanup-Image /ScanHealth
DISM /Online /Cleanup-Image /RestoreHealth
After DISM completes, re-run sfc /scannow to confirm repairs.
Step 3.3 — Check disk health
chkdsk C: /f /r /x
Schedule on next reboot. Bad sectors on the OS drive can corrupt the page file and trigger MEMORY_MANAGEMENT.
Phase 4: Fix Driver Issues
nvlddmkm.sys (NVIDIA display driver), fltmgr.sys (Windows Filter Manager), and ntoskrnl.exe are the three most frequently blamed modules in Windows 10 memory BSODs.
Step 4.1 — GPU driver (nvlddmkm.sys / BSOD nvlddmkm sys Windows 10)
Use Display Driver Uninstaller (DDU) in Safe Mode to completely remove the current GPU driver:
- Boot into Safe Mode (hold Shift, click Restart → Troubleshoot → Advanced → Startup Settings → 4).
- Run DDU, select GPU vendor, click Clean and restart.
- After reboot, install the latest WHQL-certified driver from nvidia.com or amd.com.
Step 4.2 — Roll back a recent driver update
Device Manager → expand Display Adapters → right-click GPU → Properties → Driver tab → Roll Back Driver. If greyed out, the previous version is unavailable; use DDU + older known-good installer.
Step 4.3 — fltmgr.sys (BSOD fltmgr sys Windows 10)
fltmgr.sys crashes often stem from third-party antivirus or backup software installing a filesystem filter driver. Check the WinDbg stack trace for the third-party driver name. Uninstall or update the offending security software.
Phase 5: Windows Update Issues
If the BSOD appeared after a Windows Update:
Step 5.1 — Uninstall the problematic update
Settings → Update & Security → View Update History → Uninstall Updates. Sort by Installed On descending and remove the most recent cumulative update (KB number visible). Restart and monitor.
Step 5.2 — Pause updates temporarily
Settings → Windows Update → Advanced Options → Pause Updates (up to 35 days) while investigating.
Phase 6: Recovery Options
System Restore: Settings → Control Panel → Recovery → Open System Restore. Choose a restore point dated before the BSODs began.
Startup Repair: Boot from Windows 10 installation media → Repair your computer → Troubleshoot → Advanced Options → Startup Repair.
In-place Upgrade Repair: From a running Windows 10 (even if intermittently stable), mount the ISO, run setup.exe, choose Keep personal files and apps. This reinstalls core OS components without data loss.
BIOS/UEFI settings: Disable XMP/EXPO memory overclocking profiles in BIOS. Running RAM faster than its rated speed without stability testing is a documented cause of 0x0000001A on Windows 10.
Frequently Asked Questions
# ============================================================
# Windows 10 BSOD MEMORY_MANAGEMENT Diagnostic & Repair Script
# Run in an elevated PowerShell (Admin) window
# ============================================================
# --- 1. Export last 10 BugCheck events from Event Viewer ---
Write-Host "[*] Fetching BugCheck events from System log..." -ForegroundColor Cyan
Get-WinEvent -LogName System -MaxEvents 500 |
Where-Object { $_.ProviderName -eq 'BugCheck' } |
Select-Object TimeCreated, Id, Message |
Format-List | Out-File "$env:USERPROFILE\Desktop\BugCheck_Events.txt"
Write-Host "[+] Saved to Desktop\BugCheck_Events.txt" -ForegroundColor Green
# --- 2. List minidump files ---
Write-Host "`n[*] Minidump files found:" -ForegroundColor Cyan
$dumpPath = "$env:SystemRoot\Minidump"
if (Test-Path $dumpPath) {
Get-ChildItem $dumpPath -Filter *.dmp | Sort-Object LastWriteTime -Descending |
Select-Object Name, LastWriteTime, @{N='SizeMB';E={[math]::Round($_.Length/1MB,2)}} |
Format-Table -AutoSize
} else {
Write-Host "[-] No minidump directory found. Enable Small Memory Dump in System Properties." -ForegroundColor Yellow
}
# --- 3. Run System File Checker ---
Write-Host "`n[*] Running SFC /scannow (this may take 10-20 minutes)..." -ForegroundColor Cyan
$sfcResult = sfc /scannow 2>&1
$sfcResult | Tee-Object -FilePath "$env:USERPROFILE\Desktop\SFC_Results.txt"
Write-Host "[+] SFC output saved to Desktop\SFC_Results.txt" -ForegroundColor Green
# --- 4. Run DISM health restore ---
Write-Host "`n[*] Running DISM RestoreHealth..." -ForegroundColor Cyan
DISM /Online /Cleanup-Image /RestoreHealth | Tee-Object -FilePath "$env:USERPROFILE\Desktop\DISM_Results.txt"
Write-Host "[+] DISM output saved to Desktop\DISM_Results.txt" -ForegroundColor Green
# --- 5. Schedule CHKDSK on next reboot ---
Write-Host "`n[*] Scheduling CHKDSK for next reboot..." -ForegroundColor Cyan
echo Y | chkdsk C: /f /r /x
Write-Host "[+] CHKDSK scheduled. It will run on next restart." -ForegroundColor Green
# --- 6. Check RAM slot usage ---
Write-Host "`n[*] Installed RAM information:" -ForegroundColor Cyan
Get-CimInstance Win32_PhysicalMemory | Select-Object BankLabel, Capacity, Speed, Manufacturer, PartNumber |
ForEach-Object {
$_.Capacity = [math]::Round($_.Capacity / 1GB, 2)
$_
} | Format-Table -AutoSize
# --- 7. List recently installed drivers (last 30 days) ---
Write-Host "`n[*] Drivers installed or updated in the last 30 days:" -ForegroundColor Cyan
$cutoff = (Get-Date).AddDays(-30)
Get-CimInstance Win32_PnPSignedDriver |
Where-Object { $_.DriverDate -gt $cutoff } |
Select-Object DeviceName, DriverVersion, DriverDate, Manufacturer |
Sort-Object DriverDate -Descending |
Format-Table -AutoSize
# --- 8. Check Windows Update history for recent installs ---
Write-Host "`n[*] Last 10 Windows Updates installed:" -ForegroundColor Cyan
Get-HotFix | Sort-Object InstalledOn -Descending | Select-Object -First 10 |
Format-Table HotFixID, Description, InstalledOn -AutoSize
# --- 9. Quick disk health via SMART (requires admin) ---
Write-Host "`n[*] Disk reliability status:" -ForegroundColor Cyan
Get-PhysicalDisk | Select-Object FriendlyName, MediaType, Size, HealthStatus, OperationalStatus |
Format-Table -AutoSize
# --- 10. Enable Driver Verifier on non-Microsoft drivers (optional, uncomment to use) ---
# WARNING: This will cause BSODs faster to identify bad drivers. Only use in a test scenario.
# verifier /standard /driver $(Get-CimInstance Win32_SystemDriver |
# Where-Object { $_.PathName -notlike '*\Microsoft\*' -and $_.PathName -notlike '*system32*' } |
# Select-Object -ExpandProperty Name) 2>&1
Write-Host "`n[DONE] Diagnostics complete. Review files on your Desktop." -ForegroundColor Green
Write-Host "Next steps: Open WinDbg Preview (Microsoft Store) and load the most recent .dmp file." -ForegroundColor Yellow
Write-Host "In WinDbg run: !analyze -v to identify the faulting driver." -ForegroundColor YellowError Medic Editorial
The Error Medic Editorial team is composed of senior DevOps engineers, Windows SREs, and system administrators with 10+ years of hands-on experience diagnosing kernel crashes, blue screens, and OS-level failures across enterprise and consumer Windows environments. We specialize in translating low-level crash dump analysis into actionable fixes for developers and power users alike.
Sources
- https://learn.microsoft.com/en-us/windows-hardware/drivers/debugger/bug-check-0x1a--memory-management
- https://learn.microsoft.com/en-us/windows-hardware/drivers/debugger/analyzing-a-kernel-mode-dump-file
- https://support.microsoft.com/en-us/windows/using-system-file-checker-in-windows-365e0031-36b1-6031-f804-8fd86e0ef4ca
- https://learn.microsoft.com/en-us/windows-hardware/drivers/devtest/driver-verifier
- https://answers.microsoft.com/en-us/windows/forum/all/bsod-memory-management-stop-code-0x0000001a/
- https://www.memtest86.com/technical.htm