STOP CODE · 0xA
IRQL_ NOT_ LESS_ OR_ EQUAL: Bad Memory Access by a Driver or Windows
Windows itself or a driver reached for memory at an invalid address while the system was at a raised interrupt level. It is the wider relative of DRIVER_IRQL_NOT_LESS_OR_EQUAL.
WHAT MICROSOFT SAYS
Microsoft's reference says this bug check "indicates that Microsoft Windows or a kernel-mode driver accessed paged memory at an invalid address while at a raised interrupt request level (IRQL)", and that it "is caused by kernel-mode device drivers that use improper addresses". Its remark for everyone else: the error "usually occurs after the installation of a faulty device driver, system service, or BIOS".
From Microsoft's documentation, linked under Sources. Microsoft wrote its page for this code for programmers; the steps below are the ones it gives everyone else.
TECHNICAL SUMMARY
| Stop code | IRQL_NOT_LESS_OR_EQUAL |
|---|---|
| Value | 0x0000000A (0xA) |
| Where you see it | At the bottom of the stop screen, and in the System event log after the restart |
| In Tweaky Driver | Stop codes are not read; driver versions are checked |
What causes IRQL_ NOT_ LESS_ OR_ EQUAL
- A device driver using a bad memory pointer, or code that should not have been pageable.
- A faulty device driver, system service or BIOS installed shortly before.
- During an upgrade to a newer Windows version: a device driver, system service, virus scanner or backup tool that is not compatible with the new version.
- Failing hardware: Microsoft gives steps for removing recently added hardware and running the maker's diagnostics.
How to fix IRQL_ NOT_ LESS_ OR_ EQUAL, safest step first
The steps come from Microsoft's guidance, with the reversible ones first. Each one says how to put back what it changed. If Windows cannot start normally, Microsoft's basic steps say to start in safe mode and continue from there.
Write down the stop code and the file the screen names
Microsoft Support says the stop code appears at the bottom of the screen and, when Windows knows it, so does the name of the module that was running. If the screen went by too fast, the command under Check it yourself lists the stop codes Windows recorded, and Event Viewer > Windows Logs > System shows the errors logged around the restart.
To undo: Nothing to undo: this only reads information.
Before you change anything: note the driver and make a restore point
Open the device's Properties > Driver tab and write down the driver provider, date and version. Then select Start, type Create a restore point, open it, and on the System Protection tab choose Create. Microsoft notes that System Protection is not turned on by default; if Create is greyed out, choose Configure and turn it on for the system drive first.
To undo: A restore point changes nothing by itself. To go back later, run System Restore and pick it: Microsoft says it reverts system files, the registry and installed programs, and leaves your personal files alone.
Take out what you added just before it started
Microsoft's first basic step for a stop code that keeps coming back is to remove new hardware: shut the PC down, disconnect the device and start again. Its bug check pages say the same about drivers and system services added recently: remove or update them, and work out what changed just before the first crash.
To undo: Reconnect the hardware, or install the program or driver again.
Update the driver the screen names
Microsoft's advice when a driver is identified in the bug check message is to disable the driver or check with the manufacturer for driver updates. In Device Manager, right-click the device and choose Update driver, or install the current package from the manufacturer's support page for your exact model. Microsoft says to examine the name of the driver if one was listed, and to look in the System log in Event Viewer for critical errors in the same time frame as the blue screen.
To undo: Open the device's Properties > Driver tab and choose Roll Back Driver, or apply the restore point.
If it started after a driver update, roll the driver back
In Device Manager, right-click the device, choose Properties, open the Driver tab and select Roll Back Driver, then give a reason and confirm. Microsoft notes that you need administrator rights, and that going back to the previous driver often fixes a problem that appeared after an update. The button is greyed out when Windows kept no earlier driver for the device.
To undo: Rolling back is the undo for the update. To return to the newer driver, install it again with Update driver or from the manufacturer's package.
Turn off the virus scanner as a test
Microsoft lists antivirus software among the causes: disable the program and see whether the error stops. If it does, contact its maker about an update.
To undo: Turn the protection back on straight after the test; do not leave the PC without it.
Install the latest Windows updates
Select Start > Settings > Windows Update and choose Check for updates. It is one of Microsoft's basic steps for a stop code that keeps returning, and it is how new versions of Windows' own drivers arrive.
To undo: If the crashes get worse after an update, apply the restore point from the earlier step.
If nothing helps, go back to a restore point
Microsoft's last basic step is to restore Windows from a system restore point made before the crashes began, or to use one of its other recovery options.
To undo: System Restore leaves personal files alone; programs and drivers installed after that restore point have to be installed again.
Check it yourself
List the stop codes Windows recorded (PowerShell)
Each entry gives the date, the stop code as a hexadecimal number with its four parameters, and where the dump file was saved. On the test PC, Windows 11 build 26300, this ran without administrator rights. An error saying no events were found means Windows recorded none. This stop code appears there as 0x0000000a.
PowerShellGet-WinEvent -FilterHashtable @{ LogName='System'; Id=1001; ProviderName='Microsoft-Windows-WER-SystemErrorReporting' } -MaxEvents 5 | Format-List TimeCreated, MessageList the driver packages installed on the PC
Shows every third-party driver package with its provider, class, version and date, so you can see what was installed around the first crash. Nothing is changed.
cmdpnputil /enum-drivers
What Tweaky Driver can and cannot do here
Driver version checkTweaky Driver does not read crash dumps or stop codes, so it cannot tell you which driver caused this screen. It helps with the step that comes after Windows names a driver: its scan lists every device with the installed driver version and shows whether Windows Update, the Microsoft Update Catalog or a manufacturer package it supports has a newer one, with the source and version in front of you before anything is installed. If the screen names no driver, check the System log first. A newer driver is no promise that the blue screen stops: the same code can come from hardware or from Windows itself.
Tweaky Driver, the driver checker that shows its sources — free for Windows 10 and 11.
Common questions
What does IRQL_NOT_LESS_OR_EQUAL mean?
Windows or a kernel-mode driver accessed paged memory at an invalid address while at a raised interrupt request level. Microsoft says the cause is typically a bad pointer or a pageability problem.
What is the difference between IRQL_NOT_LESS_OR_EQUAL and DRIVER_IRQL_NOT_LESS_OR_EQUAL?
Microsoft describes 0xD1, the one with DRIVER in its name, as a kernel-mode driver making the bad access. For 0xA it says Windows or a driver made the access, and its remarks add system services, BIOS and hardware.
Is IRQL_NOT_LESS_OR_EQUAL a RAM problem?
It can be hardware. Microsoft's steps include removing recently added hardware, replacing a failed component and running the system maker's hardware diagnostics. Its first-named causes are still drivers, system services and BIOS.