STIGQter: STIG Summary: Oracle Linux 9 Security Technical Implementation Guide Version: 1 Release: 6 Benchmark Date: 01 Jul 2026:

OL 9 must restrict exposed kernel pointer addresses access.

DISA Rule

SV-271747r1198253_rule

Vulnerability Number

V-271747

Group Title

SRG-OS-000132-GPOS-00067

Rule Version

OL09-00-002408

Severity

CAT II

CCI(s)

CCI-001082 - Separate user functionality, including user interface services, from system management functionality.
CCI-002824 - Implement organization-defined controls to protect its memory from unauthorized code execution.

Weight

Fix Recommendation

Configure OL 9 to prevent the leak of kernel pointers to unprivileged users.

Add or edit the following line in /etc/sysctl.d/99-sysctl.conf system configuration file:

kernel.kptr_restrict = 1

Reload settings from all system configuration files with the following command:

$ sudo sysctl --system

Check Contents

Verify that OL 9 restricts access to exposed kernel pointers with the following command:

$ sysctl kernel.kptr_restrict
kernel.kptr_restrict = 1

Vulnerability Number

V-271747

Documentable

False

Rule Version

OL09-00-002408

Severity Override Guidance

Verify that OL 9 restricts access to exposed kernel pointers with the following command:

$ sysctl kernel.kptr_restrict
kernel.kptr_restrict = 1

Check Content Reference

Target Key

5680