STIGQter: STIG Summary: Red Hat Enterprise Linux 9 Security Technical Implementation Guide Version: 2 Release: 9 Benchmark Date: 01 Jul 2026:

RHEL 9 Bluetooth must be disabled.

DISA Rule

SV-258039r1045131_rule

Vulnerability Number

V-258039

Group Title

SRG-OS-000095-GPOS-00049

Rule Version

RHEL-09-291035

Severity

CAT II

CCI(s)

• CCI-000381 - Configure the system to provide only organization-defined mission essential capabilities.
• CCI-001443 - Protect wireless access to the system using authentication of users and/or devices.

Weight

10

Fix Recommendation

Configure RHEL 9 to disable the Bluetooth adapter when not in use.

Create or modify the "/etc/modprobe.d/bluetooth.conf" file with the following lines:

install bluetooth /bin/false
blacklist bluetooth

Reboot the system for the settings to take effect.

Check Contents

Verify that RHEL 9 disables the ability to load the Bluetooth kernel module with the following command:

$ sudo grep -r bluetooth /etc/modprobe.conf /etc/modprobe.d/*

install bluetooth /bin/false
blacklist bluetooth

If the command does not return any output, or the lines are commented out, and use of Bluetooth is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.

Vulnerability Number

V-258039

Documentable

False

Rule Version

RHEL-09-291035

Severity Override Guidance

Verify that RHEL 9 disables the ability to load the Bluetooth kernel module with the following command:

$ sudo grep -r bluetooth /etc/modprobe.conf /etc/modprobe.d/*

install bluetooth /bin/false
blacklist bluetooth

If the command does not return any output, or the lines are commented out, and use of Bluetooth is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.

Check Content Reference

M

Target Key

5551