STIGQter: STIG Summary: Canonical Ubuntu 22.04 LTS Security Technical Implementation Guide Version: 2 Release: 9 Benchmark Date: 01 Jul 2026:

Ubuntu 22.04 LTS must implement address space layout randomization to protect its memory from unauthorized code execution.

DISA Rule

SV-260474r958928_rule

Vulnerability Number

V-260474

Group Title

SRG-OS-000433-GPOS-00193

Rule Version

UBTU-22-213020

Severity

CAT II

CCI(s)

CCI-002824 - Implement organization-defined controls to protect its memory from unauthorized code execution.

Weight

Fix Recommendation

Remove the "kernel.randomize_va_space" entry found in the "/etc/sysctl.conf" file or any file located in the "/etc/sysctl.d/" directory.

Reload the system configuration files for the changes to take effect by using the following command:

$ sudo sysctl --system

Check Contents

Verify Ubuntu 22.04 LTS implements address space layout randomization (ASLR) by using the following command:

$ sysctl kernel.randomize_va_space
kernel.randomize_va_space = 2

If no output is returned, verify the kernel parameter "randomize_va_space" is set to "2" by using the following command:

$ cat /proc/sys/kernel/randomize_va_space
2

If "kernel.randomize_va_space" is not set to "2", this is a finding.

Verify that a saved value of the "kernel.randomize_va_space" variable is not defined.

$ sudo grep -ER "^kernel.randomize_va_space=[^2]" /etc/sysctl.conf /etc/sysctl.d

If this returns a result, this is a finding.

Vulnerability Number

V-260474

Documentable

False

Rule Version

UBTU-22-213020

Severity Override Guidance

Check Content Reference

Target Key

5594