← Rules Catalog
mediumkernelverified ✓✓rollback-safe

Disable SCTP kernel module

kmod-disable-sctp · RHEL ≥ 8 · 1 impl

Description

The Stream Control Transmission Protocol (SCTP) kernel module should be disabled if not required.

Rationale

SCTP is a transport layer protocol that is rarely used on most systems. Disabling unused protocols reduces the attack surface and potential for exploitation of protocol vulnerabilities.

Check → Remediate

Checkkernel_module_state
name:
sctp
state:
disabled
Remediatekernel_module_disable
name:
sctp

Framework references

CIS

rhel9 3.2.4rhel10 3.2.6rhel8 3.2.5

STIG

V-257807V-230496V-281313 / RHEL-10-701110

NIST 800-53

CM-7

Live verification

rhel10:checkrhel8:checkrhel9:full
#kernel-module#sctp#network#attack-surface#stig