lowkernelverified ✓rollback-safe
Disable udf kernel module
kmod-disable-udf · RHEL ≥ 8 · 1 impl
Description
The udf filesystem is the Universal Disk Format used for DVDs and newer optical media. It is rarely needed on server systems.
Rationale
Removing support for unnecessary filesystems reduces the kernel attack surface. A vulnerability in an unused filesystem module could be exploited if loadable.
Check → Remediate
Checkkernel_module_state
- name:
- udf
- state:
- blacklisted
Remediatekernel_module_disable
- name:
- udf
Framework references
CIS
rhel8 1.1.1.8rhel9 1.1.1.7rhel10 1.1.1.8
NIST 800-53
CM-7
Live verification
rhel10:checkrhel8:checkrhel9:check
#kernel-module#filesystem#attack-surface