STIGQter: STIG Summary: Riverbed NetIM OS Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 11 Sep 2025:

Ubuntu OS must implement nonexecutable data to protect its memory from unauthorized code execution.

DISA Rule

SV-275570r1147760_rule

Vulnerability Number

V-275570

Group Title

SRG-OS-000433-GPOS-00192

Rule Version

RIIM-OS-213025

Severity

CAT II

CCI(s)

• CCI-002824 - Implement organization-defined controls to protect its memory from unauthorized code execution.

Weight

10

Fix Recommendation

Configure Ubuntu OS to enable NX.

If the installed CPU is hardware capable of NX protection, check if the system's BIOS/UEFI setup configuration permits toggling the "NX bit" or "no execution bit", and set it to "enabled".

Check Contents

Verify the NX (no-execution) bit flag is set on the system by using the following command:

$ sudo dmesg | grep -i "execute disable"
[ 0.000000] NX (Execute Disable) protection: active

If "dmesg" does not show "NX (Execute Disable) protection: active", check the hardware capabilities of the installed CPU by using the following command:

$ grep flags /proc/cpuinfo | grep -o nx | sort -u
nx

If no output is returned, this is a finding.

Vulnerability Number

V-275570

Documentable

False

Rule Version

RIIM-OS-213025

Severity Override Guidance

Verify the NX (no-execution) bit flag is set on the system by using the following command:

$ sudo dmesg | grep -i "execute disable"
[ 0.000000] NX (Execute Disable) protection: active

If "dmesg" does not show "NX (Execute Disable) protection: active", check the hardware capabilities of the installed CPU by using the following command:

$ grep flags /proc/cpuinfo | grep -o nx | sort -u
nx

If no output is returned, this is a finding.

Check Content Reference

M

Target Key

5706