mediumkernelverified ✓rollback-safe
Disable ATM kernel module
kmod-disable-atm · RHEL ≥ 8 · 1 impl
Description
The ATM (Asynchronous Transfer Mode) kernel module must be disabled. ATM is an obsolete networking protocol.
Rationale
Disabling unused kernel modules reduces the kernel attack surface and eliminates potential vulnerabilities.
Check → Remediate
Checkkernel_module_state
- name:
- atm
- state:
- disabled
Remediatekernel_module_disable
- name:
- atm
Framework references
CIS
rhel8 3.2.1rhel10 3.2.1
STIG
V-257804 / RHEL-09-213045V-230494
NIST 800-53
CM-7
Live verification
rhel8:checkrhel9:check
#kernel#module#atm#attack-surface