AirVPN Forums

Non-Deterministic BSOD 0x3B in wireguard.sys on Disconnect

Mon, 14 Sep 2026 02:13:54 +0000

Hello AirVPN Support and Development Team, I am writing to report a stability issue regarding a non-deterministic Blue Screen of Death (BSOD) with error code **0x3B (SYSTEM_SERVICE_EXCEPTION)** triggered when disconnecting from a WireGuard tunnel via the Eddie client. Because this crash happens intermittently during the teardown sequence, it strongly indicates a **Race Condition** or **Use-After-Free (UAF)** vulnerability inside the `wireguard.sys` driver wrapper, where memory buffers are accessed after being invalidated by the NDIS subsystem. **System Environment** * **OS:** Windows 10 IoT Enterprise LTSC 2021 (64-bit) * **Build Number:** 19044.7725 * **Eddie Version:** Any version utilizing WireGuard 1.0.0.0 * **WireGuard Driver Version:** WireGuard 1.0.0.0 **Bug Check Details & Stack Trace Summary** * **Bug Check Code:** 0x3B (`SYSTEM_SERVICE_EXCEPTION`) * **Exception Code:** 0xC0000005 (`EXCEPTION_ACCESS_VIOLATION`) * **Faulting Address:** `0xfffff8004f01111e` (Inside `ndis.sys`) * **Trigger Event:** Disconnecting from the WireGuard tunnel using Eddie. * **Key Stack Frames:** Crash manifests inside `ndis!ndisDeviceControlHandler` triggered by concurrent execution paths originating from `wireguard.sys+0x13b02` and `wireguard.sys+0x13844` during an IOCTL-driven shutdown. **Technical Analysis (Race Condition Hypothesis)** The crash signature and call stack point to a synchronization gap during the driver's teardown phase: 1. **Teardown Initiation:** Eddie issues an IOCTL call to halt the adapter. 2. **Memory Invalidation:** NDIS begins freeing `NDIS_MINIPORT_BLOCK` structures and associated packet buffers. 3. **Concurrent Access:** A pending network interrupt or timer event inside `wireguard.sys` simultaneously attempts to process packets using stale pointers. 4. **Violation:** The driver dereferences the invalidated memory, throwing an access violation within `ndis.sys`. **Reproduction Steps** 1. Launch Eddie and connect to any WireGuard endpoint. 2. Maintain the connection for an arbitrary duration. 3. Click **Disconnect**. 4. **Result:** The client intermittently crashes with BSOD 0x3B instead of executing a clean disconnect. The failure is purely stochastic and independent of network traffic load. **Troubleshooting Performed** * Fast Startup: Disabled. * Clean Install: Performed complete purges of Eddie and residual `wireguard.sys` drivers, followed by clean reinstalls. The issue persists. * Traffic Load: Tested under both idle and high-throughput states; failures occur uniformly, confirming a state-dependent synchronization bug rather than a load-dependent fault. **Impact & Request** This issue undermines system stability on Windows 10 IoT LTSC environments. Since the official WireGuard for Windows client utilizes `Wintun.sys` (which manages adapter concurrency and teardown safely in user-space/TUN architecture), the legacy `wireguard.sys` wrapper appears to lack robust reference counting or synchronization primitives (such as proper spinlock implementation) during NDIS miniport halts. Could you please clarify: * Are you aware of this specific race condition in `wireguard.sys`, and is there an updated build or fix available? * Are there plans to transition Eddie toward native `Wintun.sys` utilization to bypass these kernel-level concurrency constraints? Thank you for your time and assistance in analyzing this behavior. A full kernel memory dump (`MEMORY.DMP`) is attached to this message. 091326-9562-01.dmp

Eddie/eddie-cli-elevated failing and blocking Internet connection

Sun, 13 Sep 2026 17:31:43 +0000

Hi, I have been using AirVPN and Eddie for almost 3 years in MacOS and Android. Some time ago (1 year?) I started to have this problem in MacOS when I started Eddie, the computer went to sleep and back or sometimes switching cable/wireless. When the splash window reaches the "network lock" step it shows this message and closes: Unexpected error. Please contact our support staff. - CurrentDomain - Object reference not set to an instance of an object - at Eddie.UI.Cocoa.Osx.AppDelegate.ApplicationShouldHandleReopen (AppKit.NSApplication sender, System.Boolean hasVisibleWindows) [0x0000c] in <4905fd93f6c34a379534a47b943e7e4d>:0 at (wrapper managed-to-native) AppKit.NSApplication.NSApplicationMain(int,intptr) at AppKit.NSApplication.Main (System.String[] args) [0x00048] in <3c4bf011da8d4906a57e81cb141cd836>:0 at Eddie.UI.Cocoa.Osx.MainClass.Main (System.String[] args) [0x0006c] in <4905fd93f6c34a379534a47b943e7e4d>:0 Here is the system report: https://eddie.website/report/5bd201d4/ The worst part is that very often the network lock remains activated, therefore locking the computer network connection. The exact nature of the problem is difficult to replicate. For instance, today I was normally using the computer, Wifi off, cable on, start Eddie and it pops up. Whereas sometimes it has resolved for itself by trying repeatedly, this time I resorted to killing eddie-cli-elevated from the terminal. I have to say, this kind of problem appeared occasionally when I started using AirVPN, but resolved well after killing eddie-cli-elevated. Not anymore after 1 year something ago. Sometimes after killing it a number of times, other times it solves itself after a while of trying, or restarting the computer... or not even restarting the computer (network lock stays there). I had some worrying situations trying to solve it restarting, killing the helper, restarting again, waiting... until somewhat Eddie comes back to life and I can unlock the network (I have been looking for a manual method to do it myself with no luck (any leads here will be well appreciated, I read Eddie documentation but no luck understanding how to work with MacOS PF method). This is rather annoying, but it can be a problem sometimes. Indeed, I stopped using the "Activate network lock at startup" option afraid of being locked out if Eddie crashed like that, but even not having it activated it leaves the network lock activated when it happens (or very often). I wonder if this has happened before and anyone has a solution (I checked the forum and found some cases, but not like mine). A big problem is that Eddie does not offer any option to solve this kind of problems, like removing the network lock or refreshing eddie-cli-elevated (I understand that it requires eddie-cli-elevated for any activity, and the former is not possible if it is not working properly or not connecting to it, but it might be able to try to restart eddie-cli-elevated if there are problems with it). Not the same problem but related to it, sometimes Eddie seems like it is not responding to the Disconnect button. Actually, it is working, but it takes a while to do something. I wonder if it should immediately show a "Disconnecting" message, so you know it is working on it. A "Force disconnect" button for problematic situations could also be handy (not very often, but a server might stop responding an Eddie just sit there with no connection, taking a long time waiting for it when hitting "Disconnect"). Greetings!

Toliman / CH

Sun, 13 Sep 2026 08:24:07 +0000

Hi, Toliman doesnt register in Client Area -> Sessions. Is this by design? The link seems to be established, i just dont see an active session in the UI. Thanks PS. This web is rather bad on mobile. Any chance you guys will work on this?

FreeBSD dhclient failing with qemu KVM?

Sat, 12 Sep 2026 22:25:34 +0000

I can't get FreeBSD to work with the kill switch enabled, without it I can get a connection just fine. Allow LAN / Private, DHCP, ping is enabled in the eddie-ui client settings. Linux mint works fine for VMs, but the connection also seems to break with lubuntu. Any ideas anybody?

Attempting to connect through Eddie fails with error about iptables

Wed, 09 Sep 2026 16:40:09 +0000

Linux Mint 22.3 -Cinnamon Kernel 6.8.0-139-generic Eddie UI 2.26.6 About a week ago trying to connect through Eddie fails with an error message posted below. Trying to turn on the Network Lock before trying to connect will fail with an error message and typically causes the UI to freeze. Attempting iptables-restore either is doing nothing quietly or fails without an error message. It will be 'running' for 5 or more minutes without showing the command prompt before I force quit. Hitting any key followed by the Enter key will show the message "iptables-restore: line 1 failed" and return to the command prompt. Any ideas on how to fix this?

How can a user be connected since Yesterday and have a traffic of 214.15 TB ?

Wed, 09 Sep 2026 15:03:30 +0000

The question in the title comes from this screenshot (line 3 and line 1). Is this a bug or maybe I don't understand how these are calculated ?

Select adapter

Mon, 07 Sep 2026 21:09:01 +0000

Hi, I need a bit of help: I installed ZeroTier (a closed network VPN) and Eddie decided to use its new adapter and thus stopped connecting. In Settings, Networking, I put in "Interface used for connection" the right one, but I see in the logs that Eddie continues to add its routes to ZeroTier: 2026.09.07 23:00:49 - Routes, add 213.152.161.27/32 for interface "ZeroTier". There are other settings that I need to change? Thank you.

Eddie - for Android TV - tips please

Mon, 07 Sep 2026 11:22:44 +0000

Hello, I would like to install Eddie to Android TV, but need few tips. TV is Philips OLED908, I think Android TV version is 11. I didn't update to latest version for my TV, which is 12. 1. Does Eddie support auto-connect VPN (on reboot or shutdown/power on) on that Android version? 2. I see Eddie has option to whitelist or blacklist apps, but didn't find what happens with other apps. If I whitelist only 3 apps on my TV (TV streaming app, SmartTube and Stremio), does that means all other apps have their Internet blocked, or they access Internet via regular connection? 3. I don't think this is possible with Eddie, but who knows. Can I have 1 app access regular Internet (TV streaming app), 2 apps via VPN, and everything else blocked from Internet? Thank you for help.

kvm/qemu guest nat blocked by network lock

Mon, 07 Sep 2026 06:38:12 +0000

This has been an issue for years. A kvm/qemu guest using NAT (default) to connect to the internet via the host does not work because Eddie network lock prevents it. Can or will AirVpn whitelist libvirt's virtual interfaces by default in Network Lock. Thank you

[Feature request] an event that fires whenever the Network Lock (re)applies its firewall rules

Sun, 06 Sep 2026 11:08:43 +0000

Feature request: an event that fires whenever the Network Lock (re)applies its firewall rules This is a feature request for Eddie — VPN Tunnel (Desktop edition), repo AirVPN/Eddie. Summary Add a new Eddie event (visible in Preferences → Events) that fires whenever the Network Lock finishes applying or re-applying its firewall rules — in any scenario, including mid-session recoveries of the elevated service that do not involve a full tunnel reconnection. The goal is to let users run a custom hook after the Network Lock is settled (for example /etc/ufw/after.init) to restore firewall rules that the Network Lock overwrote, such as outbound NAT for Docker containers. Environment Eddie 2.26.2 (eddie-ui), GNU/Linux (Linux Mint), OpenVPN over tun0. Network Lock mode: linux_iptables_legacy (see ~/.config/eddie/Recovery.xml😞 Problem Eddie's Network Lock works by writing strict firewall rules (on Linux it can use nftables / iptables-nft / iptables-legacy). Those rules replace/clean part of the existing chains. If an application (e.g. Docker) or the user has inserted its own NAT/FORWARD rules on top of the Network Lock, a later re-application of the lock silently removes them. The existing events do not cover every moment the lock is (re)applied: Event When it fires (from the source) Does it run after the lock is settled? app start / app end Engine start / shutdown (Engine.cs, RunEventCommand("app.start" / "app.stop")) No session start / session end Beginning of the connect flow / end of session (Engine.SessionStart() → OnSessionStart() → RunEventCommand("session.start"), before the tunnel exists) No vpn pre Just before launching the tunnel (Session.cs, before m_connection.OnStart()) No vpn up Tunnel fully established, after NetworkLockManager.OnVpnEstablished() and Provider.OnVpnEstablished(), right before SetConnected(true) (Session.ConnectedStep()) Yes, but only on a normal connect vpn down Tunnel down detected (Session.cs, RunEventCommand("vpn.down")) Not relevant The gap: the vpn up event only fires during a normal connection flow. When the elevated service (eddie-cli-elevated mode=service) crashes and recovers mid-session — Eddie writes a Recovery.xml and re-applies the Network Lock without a tunnel reconnection — no event fires at all. Any custom rules the user had layered on top of the lock are wiped and are not restored. Real-world impact Concrete case observed (Eddie 2.26.2, Linux): A host runs Docker containers. Outbound connectivity for containers relies on user firewall rules (/etc/ufw/after.init, chains SETUP-FW-* in iptables/iptables-legacy/nft) applied after the Network Lock is active. The vpn up event was configured to re-apply those rules on every normal connect, and that worked. After a recovery of the elevated service (a Recovery.xml appeared with a timestamp between the VPN connect and the failure), the containers lost outbound Internet with no event having fired. Only a manual sudo /etc/ufw/after.init start restored connectivity. Result: a container running an application that calls an external HTTPS API could not reach that endpoint; HTTP requests hung until the reverse proxy timed out. Zero bytes were returned to the client. Proposed solution Add a new built-in event, for example netlock.up (UI label suggestion: "Network Lock applied"), that is executed after the Network Lock has finished (re)applying its rules in ANY of these situations: Normal connect (as vpn up today, after NetworkLockManager.OnVpnEstablished()). Manual toggle of the Network Lock on/off. Settings/allow-list changes that re-apply the lock (NetworkLockManager.OnUpdateIps() and similar). Recovery of the elevated service that re-applies the lock mid-session (Recovery.cs / Recovery.xml), with or without a tunnel reconnection. It should be exposed through the existing event mechanism so users can configure it in Preferences → Events with event..filename, event..arguments, event..waitend (see ProfileOptions.cs, method EnsureDefaultsEvent). An acceptable alternative would be to re-fire vpn up after a recovery that re-applies the Network Lock while the session stays connected. Implementation hints (based on reading the master branch) src/Lib.Core/ProfileOptions.cs — EnsureDefaultsEvent(name) already registers the three per-event options; a new event name would only need to be registered there (and exposed in the Events UI). src/Lib.Core/Engine.cs — RunEventCommand(name) reads event..* and runs SystemExec.ExecForUserEvent(filename, arguments, waitEnd). Where the rules are actually (re)applied: src/Lib.Core/NetworkLockManager.cs (Activation/Deactivation, OnVpnEstablished, OnUpdateIps) and the Linux platform plugins (src/Lib.Platform.Linux*), plus the elevated-service recovery path. Firing the event right after the rules are written, from a single choke point, would make the event reliable. The docs for Network Lock already warn: "if you change firewall rules yourself after activating Network Lock, Eddie will not detect that." A user-hook-friendly event is the natural companion to that behavior. Thank you very much in advance.

What's your Share Ratio? (or Total Upload)

Sat, 05 Sep 2026 02:20:02 +0000

251 TB Uploaded / Share Ratio: 25.42 for me! What's yours?

Gluetun + qbittorrent + port forwarding not working

Thu, 03 Sep 2026 16:06:59 +0000

Hello everyone, Before posting, i've checked different topics on the same issue (Here, here, here, here), but I didn't find any solution. Before, I was on Win11 with the AirVPN app, and port forwarding was working. I switchted my mini server on Proxmox, and put qbittorrent behind gluetun. It works in a way, as I can download and upload, even if the DHT number is half what it was on Win11. But the main issue is that I'm struggling accessing my qbittorrent Web UI from outside. On the AirVPN port forwarding admin, when I test open my 2 ports (one for download, one for the web ui), I have connection timeout. Port 37596 is for download. Port 30306 is for Web UI. Here is my docker compose : services: gluetun: image: qmcgaw/gluetun container_name: gluetun cap_add: - NET_ADMIN devices: - /dev/net/tun:/dev/net/tun volumes: - /opt/docker/config/gluetun:/gluetun ports: - 37596:37596/tcp - 37596:37596/udp - 30306:30306 environment: - VPN_SERVICE_PROVIDER=airvpn - VPN_TYPE=wireguard - WIREGUARD_PRIVATE_KEY=*** - WIREGUARD_PRESHARED_KEY=*** - WIREGUARD_ADDRESSES=***/32 - WIREGUARD_IMPLEMENTATION=userspace - WIREGUARD_MTU=1320 - WIREGUARD_PORT=1637 - SERVER_COUNTRIES=Netherlands - PORT_FORWARDED=37596,30306 - FIREWALL_OUTBOUND_SUBNETS=192.168.1.0/24 - FIREWALL_INPUT_PORTS=30306,37596 - VPN_PORT_FORWARDING_LISTENING_PORTS=30306,37596 - DNS_UPSTREAM_RESOLVER_TYPE=plain - DNS_UPSTREAM_PLAIN_ADDRESSES=***:53 - UPDATER_PERIOD=24h healthcheck: test: ["NONE"] restart: always qbittorrent: image: lscr.io/linuxserver/qbittorrent:latest container_name: qbittorrent network_mode: "service:gluetun" environment: - PUID=1000 - PGID=1000 - TZ=Europe/Paris - WEBUI_PORT=30306 - TORRENTING_PORT=37596 volumes: - /opt/docker/config/qbittorrent/qBittorrent:/config - /mnt/pve/NAS:/NAS restart: always If someone has an idea, it would be delightful Thank you :)

trying to get air vpn to startup with linux machine

Thu, 03 Sep 2026 13:55:27 +0000

Hi I am moving from another vpn, I have got a 3 day sub to try out. I have on a linux mint v22 box and have got sorted with the software i run and its all ok. However once confirmed working i now want to set the vpn so it starts up when the box is cold booted or rebooted. (doesnt happen often but nice to set and forget) I have read a faq's for airvpn, eddie ui and looked at all the menus in config and thought it looks like just "connect at startup" and "dont ask elevation on every run" need to be ticked. When i do a cold boot or a reboot Air VPN doesn't load at all, so my other 2 softwares load and pick up my real ip, so i have to close them down manually start airvpn then my apps. What have i missed ? Thanks in advance of any help.

Swiss Servers always disconnects and packet loss?

Wed, 02 Sep 2026 17:29:37 +0000

I always used a UK Server until it shut down. I then decided to switch to a swiss server. I used Athebyne and Toliman. I realized they are very unstable - my client lost connection all the time (my ping to the swiss server is 10ms). I realized they have several times an hour problems with packet loss: Is this Problem now to AirVPN? It seems also - at least for my case - it they are unusable like they are. I mean all 10 minutes I get disconnected. What is going on there? I now switched to a DE server - so far it works.

Eddie, unable to connect

Tue, 01 Sep 2026 02:41:41 +0000

I went away for the weekend and came back and now Eddie doesn't seem to want to connect, throws an error about Nexthop having an invalid gateway. Searching this error hasn't really gotten me anywhere as all the results seem to be about port forwarding which I'm not doing as I don't control my network. Here's the system report [link removed for privacy now that it's been fixed], If someone could tell me what's going on that would be greatly appreciated.

Can someone help me with pay login

Tue, 01 Sep 2026 00:40:36 +0000

Can someone help me with pay login

updated Eddie and now constant disconnect/reconnect

Mon, 31 Aug 2026 23:11:28 +0000

I'm on an old Mac running HighSierra 10.13.6. It was working just before, but only showing like 3 servers, so I updated and now it does not work at all. Going to have to switch VPN providers soon I think, Eddie is so janky...

"Search" Field in resolv.conf

Mon, 31 Aug 2026 21:10:36 +0000

I am attempting to resolve a dns issue between Eddie and tailscale. I have entered the nameserver entries from the tailscale resolv.conf file into Eddie's custom dns, and that seems to work fine. But to get tailscale's "magicdns" to work, I need to enter a "search" field into resolv.conf. Can I do that from Eddie in the custom dns entry area, or is there another way? Any help will be greatly appreciated! Thanks!

Tray icon missing on CachyOS

Mon, 31 Aug 2026 05:53:47 +0000

Hey team, The system tray icon has been missing on my CachyOS install lately. A similar issue is affecting Signal right now, it's likely to be the same cause. https://github.com/signalapp/Signal-Desktop/issues/7992

VPN Adapter not found and my solution prevents protocol selection

Sun, 30 Aug 2026 14:30:24 +0000

I'm on windows 10 and was using the latest version of Eddie. I got the same issue as a lot of people: VPN Network Adapter not found, install fail (ovpn-dco I used the solution of installing an older version of Eddie and it worked. (First I had to delete the config file to roll back to an older client) The problem is that my isp throttles UDP so I usually change to another protocol using a 443 port to mask as web traffic. This means changing the default protocol settings from "automatic" to select a 443 port option. Once I did this, I was back to square one and had the original issue finding the adapter again. Switching back to default settings allows me to connect, but that means it only works when the protocol selection is set to automatic. Not really sure what the issue is now, any ideas how to fix it so I can mask my traffic? Much appreciated!

Eddie UI not showing Download/Upload speed data

Sun, 30 Aug 2026 13:53:27 +0000

I am running Eddie (2.26.2) on macOS Sequoia and everything connects as normal but the main UI window no longer shows Download and Upload speeds in real time. It is stuck at 0 bit/s on both. Is there a way to fix this?

Can't connect to any server after update 2.26.2

Sat, 29 Aug 2026 20:48:41 +0000

Hi Everything was fine until I updated and I can't get it to work again.. Tried to unistall all and then installed again, but I cant remember exactly which setting was before, I thought the app would update itself and run. - Win 10 system (yeah I know but everything works fine) - Eddie 2.26.3 ⚠️I know my ISP (Orange) has been blocking some stuff and I had to change to a manual protocol like last year, not sure which. And there are so many ! With Wireguard enabled, the adapter shows up in the network adapters but doesn't work through With OpenSSL I just get this error E 2026.08.29 22:25:17 - VPN Network Adapter not found, install fail (ovpn-dco) >My local FW has all Eddie apps allowed just to be sure (but it wasn't required before) >Also tried to remove .profile file and just reconnect, after clean install, same. Whats missing ? Some components or just finding the right option ? Quitting attempts for now. Eddie_20260829_224154_wireguard.txt Eddie_20260829_224321_openvpn.txt

airvpnapp dot com

Sat, 29 Aug 2026 07:36:44 +0000

I know this website is not affiliated with airvpn, but an official reply would be appreciated. thank you https://www whois dot com/whois/airvpnapp.com

Sailfish OS

Fri, 28 Aug 2026 15:31:08 +0000

Has anyone tried Eddie GUI on Sailfish OS ? I am wondering if it may be compatible with the new Jolla phone native OS rather than using Android App Support.

Server CPU Usage

Fri, 28 Aug 2026 10:30:27 +0000

Hi, Can I suggest a new metric on the servers list? Would it be possible to add a server CPU usage % please? I might be wrong but I believe in some cases that although there seems to be bandwitdh available, the CPU is hammered (probably IRQs) as the actual tunnel speed is very low. For example I am on a server with ~250mb to spare (according to the servers page) and I can barely do ~2.5MB/sec on either well seeded torrents or usenet. Thanks