Windows crashes due to CrowdStrike Falcon Sensor Update

Advisory No: TZCERT/SA/2024/07/19

Date of First Release: 19^th July 2024

Source: CrowdStrike

Software Affected: Windows systems

Overview:

CrowdStrike experienced a significant issue due to a faulty update of its Falcon sensor software, which caused numerous Windows systems worldwide to crash and display the Blue Screen of Death (BSOD).

Description:

A recent update to CrowdStrike’s Falcon sensor has caused widespread system crashes on Windows platforms, leading to Blue Screen of Death (BSOD) errors. CrowdStrike’s Falcon Sensor is software designed to prevent computer systems from cyber-attacks. This issue has affected various sectors, including airlines, banks, and media companies globally.

Impact:

Systems are unable to boot normally, impacting business operations and critical services.

Solution:

Currently, users and administrators of affected systems are recommended to perform the workaround:

• Boot into Safe Mode
  • Restart your PC and enter Safe Mode.

• Delete Faulty File:
  • Navigate to C:\Windows\System32\drivers\CrowdStrike.
  • Delete the file named “C-00000291*.sys”.

• Restart PC
  • After deleting the file, restart your system.

References:

1. https://mashable.com/article/windows-bsod-crash-crowdstrike-update-worldwide-outage