Who asked for this file? Previous mode confusion in Windows kernel drivers
Windows stores one previous-access-mode value per thread and uses it to answer two unrelated questions, and the workaround for that leaks straight into driver code.
found by James Forshaw, Google Project Zero