mediumkernelverified ✓✓rollback-safe
Disable USB storage kernel module
kmod-disable-usb-storage · UBUNTU ≥ 22, RHEL ≥ 8 · 1 impl
Description
USB storage devices can be used to introduce malware or exfiltrate data. The usb-storage kernel module should be disabled on systems where USB storage is not required.
Rationale
Disabling USB storage prevents unauthorized data transfer via removable media and reduces the risk of malware introduction.
Check → Remediate
Checkkernel_module_state
- name:
- usb-storage
- state:
- blacklisted
Remediatekernel_module_disable
- name:
- usb-storage
Framework references
CIS
rhel8 1.1.1.10rhel9 1.1.1.8rhel10 1.1.1.10ubuntu24 1.1.1.10ubuntu22 1.1.1.9
STIG
V-230503V-258034V-270718 / UBTU-24-300039V-260540 / UBTU-22-291010V-281288 / RHEL-10-700850
NIST 800-53
CM-7MP-7
Live verification
rhel10:checkrhel8:checkrhel9:checkubuntu22:checkubuntu24:checkubuntu24:full
#kernel-module#usb#data-protection