STIGQter: STIG Summary: Amazon Linux 2023 Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 01 Jul 2026:

Amazon Linux 2023 must implement nonexecutable data to protect its memory from unauthorized code execution.

DISA Rule

SV-274184r1120540_rule

Vulnerability Number

V-274184

Group Title

SRG-OS-000433-GPOS-00192

Rule Version

AZLX-23-002610

Severity

CAT II

CCI(s)

• CCI-002824 - Implement organization-defined controls to protect its memory from unauthorized code execution.

Weight

10

Fix Recommendation

Configure Amazon Linux 2023 NX support to be enabled by opening a support case via the AWS Console to investigate why NX support is not detected.

Check Contents

Verify Amazon Linux 2023 NX support is enabled with the following command:

$ sudo dmesg | grep '[NX|DX]*protection'
[ 0.000000] NX (Execute Disable) protection: active

If "dmesg" does not show "NX (Execute Disable) protection" active, this is a finding.

Vulnerability Number

V-274184

Documentable

False

Rule Version

AZLX-23-002610

Severity Override Guidance

Verify Amazon Linux 2023 NX support is enabled with the following command:

$ sudo dmesg | grep '[NX|DX]*protection'
[ 0.000000] NX (Execute Disable) protection: active

If "dmesg" does not show "NX (Execute Disable) protection" active, this is a finding.

Check Content Reference

M

Target Key

5700