Generate summary with AI

Persistent blue screen crashes tied to system drivers can disrupt operations and stall productivity across your entire network infrastructure. When the core DirectX Graphics Kernel Subsystem encounters an unhandled violation, Windows proactively triggers a full system reboot to protect data integrity. Pinpointing whether the failure stems from an unstable vendor driver, conflicting software, or physical hardware requires a methodical isolation approach.

By utilizing native Windows utilities and structural diagnostics, you can accurately uncover the root cause behind these critical system interruptions. In this blog, we’ll cover how to analyze crash dumps and implement advanced remediation steps to stabilize your environment.

» Here’ s how to solve common IT issues

What is the dxgkrnl.sys file?

The dxgkrnl.sys file is the core system driver for the DirectX Graphics Kernel Subsystem in Windows. It implements the Windows Display Driver Model (WDDM) kernel subsystem, serving as the essential link between user-mode graphics applications and your vendor-specific GPU drivers.

Because it operates within highly privileged kernel space (Ring 0), it shares memory space with other core operating system components.

When an unhandled exception or system violation occurs within this layer, the failure can’t be safely isolated to a single application. To protect overall data integrity and prevent widespread memory corruption, Windows intentionally triggers Bug Check 0x113 (VIDEO_DXGKRNL_FATAL_ERROR), forcing a full system reboot.

Specific system conditions that force this fatal error include:

  • Driver protocol violations: Occur when an unexpected deferred destruction happens, meaning a GPU object was destroyed while still being actively referenced by the kernel scheduler.
  • Timeout detection and recovery (TDR) failures: When the GPU stops responding, Windows attempts to reset the graphics driver in the background. If the driver fails to respond to this reset request within a specific time window, or triggers consecutive recovery scenarios, the kernel escalates the issue to a fatal crash.
  • Hybrid graphics power state transitions: Failures or excessive delays during the handshake sequence when the system attempts to transition workloads from an integrated GPU to a dedicated one.
  • Guardrail violations by third-party drivers: Occur when a vendor kernel-mode driver executes unauthorized calls or triggers a page fault in non-pageable memory within the shared graphics subsystem.

» Find out how to update drivers on PC

Step-by-step diagnostic isolation procedures

To isolate a dxgkrnl.sys BSOD and determine if the root cause is a software conflict or failing hardwareS, use these native troubleshooting steps:

1. Enable memory dump generation by pressing Win + I to open Settings > System > About

memory dump generation

2. Click the Advanced system settings button, navigate to the Advanced tab and press the Settings button corresponding to the Startup and Recovery section

Advanced system settings

3. Install WinDbg (a debugger that can be used to analyze crash dumps)

Install  WinDbg

4. Launch WinDbg and go to File > Open dump file, browse to C:\Windows\Minidump, and select your file

WinDbg

5. Wait for the status bar to finish downloading required resources

Status bar to finish downloading

6. Run !analyze -v to analyze the dump file

Run  !analyze -v

7. Inspect the report

Inspect the report

» Looking for specific software? Here are the best driver updater software options

The extreme dangers of manual file replacement

Attempting to fix this error by downloading a replacement dxgkrnl.sys file from a third-party website introduces severe stability and security implications:

  • Unrestricted kernel access: Because this subsystem operates in Ring 0, a compromised or malicious third-party file gains unrestricted access to system memory, enabling deep rootkit or malware injection.
  • Boot loops: Modern Windows security enforces strict kernel-mode code signing policies. An unverified or altered file will fail cryptographic signature verification, preventing the operating system from booting at all.
  • Component store desynchronization: Bypassing native OS repair tools like System File Checker (SFC) and Deployment Image Servicing and Management (DISM) breaks the integrity of the Windows Component Store (WinSxS), rendering native validation mechanisms unreliable for future updates.

» Here’s how to disable Windows updates and manually re-enable Windows updates

Advanced system remediation strategies

When kernel-level graphics exceptions threaten infrastructure stability, you must deploy targeted technical fixes to eliminate driver conflicts, hardware instability, and power state mismatches.

Method 1: Clean graphics driver wipe via DDU

When to use: Use this when a standard driver update fails, or when corrupted registry keys and leftover driver fragments cause persistent dxgkrnl.sys conflicts.

Follow these steps:

1. Navigate to your GPU manufacturer’s official website and download the display drivers for your specific GPU without installing them yet

2. Navigate to Display Driver Uninstaller’s official website and download the removal tool

GPU manufacturer’s site

3. Double-click the downloaded exe file and extract it to your preferred location

Double-click the downloaded exe file

4. The first time you launch DDU you will be prompted with an options dialog. Check the Enable Safe Mode dialog and restart DDU

Enable Safe Mode dialog

Tip: You can also check the Prevent Downloads of drivers from “Windows update” options to stop Windows from automatically downloading GPU drivers

5. The next time you launch DDU, select Safe Mode in the Launch option section and click Reboot to Safe Mode

Reboot to Safe Mode

6. You may be prompted to enter your BitLocker recovery key if BitLocker drive encryption is enabled

BitLocker drive encryption

7. Press Win + I to open Settings and go to Privacy & security > Device encryption > BitLocker drive encryption (under Related settings)

BitLocker drive encryption 2

8. Select Suspend protection. This temporarily pauses encryption until the next restart, preventing BitLocker recovery prompts during the process

Suspend protection

Take note: If you haven’t enabled the option to block automatic driver downloads from Windows Update, disconnect from the internet before continuing. This prevents Windows from reinstalling a broken or older GPU driver during cleanup. If you used DDU to reboot into Safe Mode, it’ll launch automatically. If not, go to the folder where you extracted DDU and open it manually.

9. In DDU, select your GPU type (NVIDIA / AMD / Intel)

select your GPU type

10. Click Clean and restart. This removes all existing graphics drivers and restarts your PC with a clean baseline

11. Before connecting to the internet, install the graphics drivers your downloaded in step 1

» Here’s how to restart a remote computer using Windows

Method 2: Disable Hardware-Accelerated GPU Scheduling (HAGS)

When to use: Use this when immature or unstable vendor driver implementations cause high-frequency context switching errors or incomplete handshakes in the kernel scheduler.

Follow these steps:

1. Press Win + I to open Settings > System > Display

Display Settings

2. Select Graphics

Graphics

3. Click the Change default graphics settings link

Take note: This UI option will only appear if both your GPU and driver natively support WDDM hardware scheduling)

4. Toggle Hardware-Accelerated GPU Scheduling to Off and restart your system for the change to take effect

» Here are the best hardware monitoring software to keep a close eye on your GPU performance

Method 3: Natively repair the OS via DISM and SFC

When to use: Use this to repair a natively corrupted dxgkrnl.syscore file or fix a damaged Windows Component Store without performing a full operating system reinstallation.

Follow these steps:

1. Open a Command Promptor Terminal window with elevated administrative privileges

Open a Command Prompt

2. Execute the following command first to provide verified recovery files: DISM.exe /Online /Cleanup-image /Restorehealth

DISM Scan

3. Once the DISM scan completes successfully, execute: sfc /scannow

SFC scannow command

Running sfc /scannow will revert any modified system files, including Windows DLL files, back to their default state while DISM provides the files required to repair your corrupted files

» Learn more about the DISM command

Method 4: Reset tuning profiles and custom overclocks

When to use: Use this when unstable RAM timings generate memory corruption that affects kernel-mode GPU memory allocation, forcing a 0x113 bug check, or when custom overclocks run the device outside standard operating parameters.

Follow these steps:

1. Restart your PC and enter the BIOS/UEFI setup menu using your device’s BIOS key (commonly Del, F2, F10, F12, or Esc, depending on the motherboard or laptop)

2. Inside BIOS, go to the memory/overclocking section and set XMP (Intel), EXPO (AMD), or DOCP (ASUS) to Disabled or Auto to remove unstable RAM timing profiles

Auto Mode BIOS

Take note: After saving changes and booting back into Windows, you should also reset any GPU-level overclocking. To do this, follow these steps:

1. Open AMD Software: Adrenalin Edition (this is AMD’s graphics control panel). You can open it in one of the following ways:

  • Click Start and type AMD Software
  • Right-click on your desktop and select AMD Software: Adrenalin Edition
  • Open the system tray (bottom-right corner), click the AMD icon, and launch it

2. Go to Performance > Tuning and select the Default profile to reset any CPU/GPU overclocks

AMD Software

3. Open MSI Afterburner (if installed) and click the Reset button on the main interface to restore default GPU settings

Afterburner Reset

4. Restart your system again to ensure all changes fully apply and instability states are cleared

» Don’t miss our guide to finding your Windows PC serial number

Method 5: Optimize performance and power management states

When to use: Use this when the WDDM kernel scheduler encounters crashes or latency failures specifically while transitioning the hardware between low-power states and active workloads.

Follow these steps:

1. Press Win + I > System > Power

System > Power

2. Look for the Power Mode section. Switch Power Mode to Best Performance

Switch Power Mode

3. Type control in the Start Menu search box and select theControl Panel app

Launch Control Panel

4. Go to System and Security > Power Options

Power Options

5. Disable fast startup by clicking the Choose what the power buttons do (on the left)

Disable fast startup

6. Uncheck the Turn on fast startup checkbox

Uncheck the Turn on fast startup

Take note: If the option isn’t visible or grayed out, click the Change settings that are currently unavailable button (in the upper part of the window) to enable modifying the setting as seen in the image below:

Change settings that are currently unavailable

7. To disable PCI Express Link State Power Management click the Change plan settings button (for the active power plan) and navigate to the PCI Express section; switch the setting to Off

PCI Express Link State Power Management

How Atera can help

Managing kernel-level graphics exceptions and tracking hardware bottlenecks across multiple workstations can quickly drain your team’s time.

Through its RMM capabilities, Atera provides real-time visibility across devices, helping you quickly identify systems showing signs of instability such as repeated crashes, driver failures, or TDR-related events. Its proactive monitoring and alerting features flag early indicators of system degradation, allowing you to respond before rendering conflicts escalate into full system reboots.

This centralized visibility makes it easier to isolate problematic endpoints, track recurring driver-related issues, and maintain overall system stability across distributed environments.

» Interested? Try Atera for free

Frequently Asked Questions

Was this helpful?

Related Articles

How to split screen on Windows

Read now

How to check the list of open ports in Linux

Read now

How to monitor Linux performance

Read now

How to restart Windows 11 in Safe Mode

Read now

Endless IT possibilities

Boost your productivity with Atera’s intuitive, centralized all-in-one platform