STIGQter: STIG Summary: Amazon Linux 2023 Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 01 Jul 2026:

Amazon Linux 2023 must implement address space layout randomization (ASLR) to protect its memory from unauthorized code execution.

DISA Rule

SV-274006r1120006_rule

Vulnerability Number

V-274006

Group Title

SRG-OS-000433-GPOS-00193

Rule Version

AZLX-23-000225

Severity

CAT II

CCI(s)

CCI-002824 - Implement organization-defined controls to protect its memory from unauthorized code execution.

Weight

Fix Recommendation

Configure Amazon Linux 2023 to enable ASLR to enhance memory protection.

Enable ASLR by setting the kernel parameter with the following command:
echo 2 | sudo tee /proc/sys/kernel/randomize_va_space

Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:

kernel.randomize_va_space = 2

Reload settings from all system configuration files with the following command:

$ sudo sysctl --system

Check Contents

Verify Amazon Linux 2023 is implementing ASLR with the following command:

$ sysctl kernel.randomize_va_space
kernel.randomize_va_space = 2

Check that the configuration files are present to enable this kernel parameter.
Verify the configuration of the kernel.kptr_restrict kernel parameter with the following command:

$ sudo /usr/lib/systemd/systemd-sysctl --cat-config | egrep -v '^(#|;)' | grep -F kernel.randomize_va_space | tail -1

kernel.randomize_va_space = 2

If "kernel.randomize_va_space" is not set to "2" or is missing, this is a finding.

Vulnerability Number

V-274006

Documentable

False

Rule Version

AZLX-23-000225

Severity Override Guidance

Check Content Reference

Target Key

5700