Detections
Analytics
RHEL-10-701000 - RHEL 10 must clear the page allocator to prevent use-after-free attacks.
Information
Poisoning writes an arbitrary value to freed pages, so any modification or reference to that page after being freed or before being initialized will be detected and prevented. This prevents many types of use-after-free vulnerabilities at little performance cost. It also prevents data leakage and detection of corrupted memory.Solution
Configure RHEL 10 to enable page poisoning with the following commands:$ sudo grubby --update-kernel=ALL --args="page_poison=1"
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_RHEL_10_V1R1_STIG.zip
Item Details
Audit Name: DISA Red Hat Enterprise Linux 10 STIG v1r1
Category: SYSTEM AND COMMUNICATIONS PROTECTION
References: 800-53|SC-3, CAT|II, CCI|CCI-001084, Rule-ID|SV-281302r1167056_rule, STIG-ID|RHEL-10-701000, Vuln-ID|V-281302
Plugin: Unix
Control ID: 1f85a46d4ac029488c8cb7e991061fed5014014d45ebe2bb3c08fd117526833a