mediumsystemverified ✓
Enable page allocator clearing in GRUB kernel parameters
grub-page-alloc-shuffle · RHEL ≥ 8 · 1 impl
Description
The init_on_alloc=1 kernel parameter must be set to clear memory pages when they are allocated. This prevents information disclosure from previously used memory.
Rationale
When memory pages are reused without being cleared, sensitive data from previous use may be accessible. Clearing pages on allocation prevents use-after-free information leaks.
Check → Remediate
Checkgrub_parameter
- key:
- init_on_alloc
- expected:
- 1
Remediategrub_parameter_set
- key:
- init_on_alloc
- value:
- 1
Framework references
NIST 800-53
CM-6SC-4
Live verification
rhel8:checkrhel9:check
#grub#kernel#memory#security#boot