STIGQter STIGQter: STIG Summary: Oracle Linux 8 Security Technical Implementation Guide Version: 2 Release: 9 Benchmark Date: 01 Jul 2026:

OL 8 must not let Meltdown and Spectre exploit critical vulnerabilities in modern processors.

DISA Rule

SV-248593r1069159_rule

Vulnerability Number

V-248593

Group Title

SRG-OS-000480-GPOS-00227

Rule Version

OL08-00-010424

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Determine the default kernel:

$ sudo grubby --default-kernel

/boot/vmlinuz-5.4.17-2011.1.2.el8uek.x86_64

Using the default kernel, remove the argument that sets the Meltdown mitigations to "off":

$ sudo grubby --update-kernel=<path-to-default-kernel> --remove-args=mitigations=off

Reboot the system for the change to take effect.

Check Contents

Verify OL 8 is configured to enable mitigations with the following command:

$ grubby --info=/boot/vmlinuz-$(uname -r) | grep mitigations

If the "mitigations" parameter is set to "off" (mitigations=off), this is a finding.

Note: The default behavior of the kernel is to enable mitigations for vulnerabilities like Meltdown and Spectre based on hardware and system requirements. Therefore, if the "mitigation" parameter is not present or if it is set to on this is not a finding.

Vulnerability Number

V-248593

Documentable

False

Rule Version

OL08-00-010424

Severity Override Guidance

Verify OL 8 is configured to enable mitigations with the following command:

$ grubby --info=/boot/vmlinuz-$(uname -r) | grep mitigations

If the "mitigations" parameter is set to "off" (mitigations=off), this is a finding.

Note: The default behavior of the kernel is to enable mitigations for vulnerabilities like Meltdown and Spectre based on hardware and system requirements. Therefore, if the "mitigation" parameter is not present or if it is set to on this is not a finding.

Check Content Reference

M

Target Key

5416