mediumkernelverified ✓✓rollback-safe
Disable SCTP kernel module
kmod-disable-sctp · RHEL ≥ 8 · 1 impl
Description
The Stream Control Transmission Protocol (SCTP) kernel module should be disabled if not required.
Rationale
SCTP is a transport layer protocol that is rarely used on most systems. Disabling unused protocols reduces the attack surface and potential for exploitation of protocol vulnerabilities.
Check → Remediate
Checkkernel_module_state
- name:
- sctp
- state:
- disabled
Remediatekernel_module_disable
- name:
- sctp
Framework references
CIS
rhel9 3.2.4rhel10 3.2.6rhel8 3.2.5
STIG
V-257807V-230496V-281313 / RHEL-10-701110
NIST 800-53
CM-7
Live verification
rhel10:checkrhel8:checkrhel9:full
#kernel-module#sctp#network#attack-surface#stig