CrowdStrike July 2024: the validator bug let the crashing file through

On 2024-07-19, a faulty update to Channel File 291 in CrowdStrike’s Falcon Sensor triggered crashes on approximately 8.5 million Windows devices globally. The root cause was an out-of-bounds memory read that produced invalid page faults – kernel-level failures that blue-screened the machine and put it into a bootloop. The file passed CrowdStrike’s content validation.