STIGQter: STIG Summary: Canonical Ubuntu 22.04 LTS Security Technical Implementation Guide Version: 2 Release: 9 Benchmark Date: 01 Jul 2026:

Ubuntu 22.04 LTS must implement nonexecutable data to protect its memory from unauthorized code execution.

DISA Rule

SV-260475r958928_rule

Vulnerability Number

V-260475

Group Title

SRG-OS-000433-GPOS-00192

Rule Version

UBTU-22-213025

Severity

CAT II

CCI(s)

• CCI-002824 - Implement organization-defined controls to protect its memory from unauthorized code execution.

Weight

10

Fix Recommendation

Configure Ubuntu 22.04 LTS to enable NX.

If the installed CPU is hardware capable of NX protection, check if the system's BIOS/UEFI setup configuration permits toggling the "NX bit" or "no execution bit", and set it to "enabled".

Check Contents

Verify the NX (no-execution) bit flag is set on the system by using the following command:

$ sudo dmesg | grep -i "execute disable"
[ 0.000000] NX (Execute Disable) protection: active

If "dmesg" does not show "NX (Execute Disable) protection: active", check the hardware capabilities of the installed CPU by using the following command:

$ grep flags /proc/cpuinfo | grep -o nx | sort -u
nx

If no output is returned, this is a finding.

Vulnerability Number

V-260475

Documentable

False

Rule Version

UBTU-22-213025

Severity Override Guidance

Verify the NX (no-execution) bit flag is set on the system by using the following command:

$ sudo dmesg | grep -i "execute disable"
[ 0.000000] NX (Execute Disable) protection: active

If "dmesg" does not show "NX (Execute Disable) protection: active", check the hardware capabilities of the installed CPU by using the following command:

$ grep flags /proc/cpuinfo | grep -o nx | sort -u
nx

If no output is returned, this is a finding.

Check Content Reference

M

Target Key

5594