STIGQter: STIG Summary: Red Hat Enterprise Linux 9 Security Technical Implementation Guide Version: 2 Release: 9 Benchmark Date: 01 Jul 2026:

RHEL 9 must be configured to disable USB mass storage.

DISA Rule

SV-258034r1051267_rule

Vulnerability Number

V-258034

Group Title

SRG-OS-000114-GPOS-00059

Rule Version

RHEL-09-291010

Severity

CAT II

CCI(s)

• CCI-000778 - Uniquely identify organization-defined devices and/or types of devices before establishing a local, remote, and/or network connection.
• CCI-001958 - Authenticate organization-defined devices and/or types of devices before establishing a local, remote, and/or network connection.
• CCI-003959 - Prohibit the use or connection of unauthorized hardware components.

Weight

10

Fix Recommendation

To configure the system to prevent the usb-storage kernel module from being loaded, add the following lines to the file "/etc/modprobe.d/usb-storage.conf" (or create "usb-storage.conf" if it does not exist):

install usb-storage /bin/false
blacklist usb-storage

Check Contents

Verify that RHEL 9 disables the ability to load the USB Storage kernel module with the following command:

$ grep -r usb-storage /etc/modprobe.conf /etc/modprobe.d/*

install usb-storage /bin/false
blacklist usb-storage

If the command does not return any output, or either line is commented out, and use of USB Storage is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.

Vulnerability Number

V-258034

Documentable

False

Rule Version

RHEL-09-291010

Severity Override Guidance

Verify that RHEL 9 disables the ability to load the USB Storage kernel module with the following command:

$ grep -r usb-storage /etc/modprobe.conf /etc/modprobe.d/*

install usb-storage /bin/false
blacklist usb-storage

If the command does not return any output, or either line is commented out, and use of USB Storage is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.

Check Content Reference

M

Target Key

5551