Microsoft Deploys Fix for Windows 11 Crashes Caused by inpoutx64.sys RGB Peripheral Driver
What Happened — Microsoft confirmed that a kernel‑mode driver ( inpoutx64.sys ) bundled with some RGB‑enabled peripherals can trigger “EXCEPTION_ACCESS_VIOLATION” crashes and prevent games such as ARC Raiders, MARVEL Tōkon, and The Finals from launching on Windows 11 24H2/25H2. A permanent fix that blocks the driver from loading was rolled out to consumer and business devices, with a manual registry‑based workaround for enterprise‑managed PCs.
Why It Matters for Compliance & Audit Readiness
- The incident illustrates a classic control‑gap: undocumented third‑party drivers loading unchecked, which violates SOC 2 System Operations and Change Management requirements.
- Continuous evidence of driver‑allow‑list enforcement (e.g., via Microsoft Endpoint Manager) provides audit‑ready proof that the organization is actively monitoring and remediating configuration drift.
Who Is Affected – Consumer‑grade PCs, corporate workstations, gaming rigs; industries that rely on Windows 11 for production or client‑facing applications (e.g., tech, media, finance, education).
Recommended Actions
- Verify that the Windows 11 update has been applied or apply the manual registry block (
Start=4underHKLM\SYSTEM\CurrentControlSet\Services\inpoutx64). - Update your endpoint‑management policies to block unsigned or non‑whitelisted drivers and log any attempts to load
inpoutx64.sys. - Capture the driver‑block status as continuous compliance evidence for SOC 2 audits.
Technical Notes – The root cause is a mis‑configured driver installed by RGB peripherals; no CVE was assigned. The crash manifests as EXCEPTION_ACCESS_VIOLATION. The fix disables the driver and will be included in the September 2026 security update. Source: BleepingComputer