| UBTU-18-010379 | V2R12 | The Ubuntu operating system must generate audit records when loading dynamic kernel modules. | |
| WN11-EP-000310 | V2R1 | Windows 11 Kernel (Direct Memory Access) DMA Protection must be enabled. | |
| RHEL-07-030819 | V3R8 | The Red Hat Enterprise Linux operating system must audit all uses of the create_module syscall. | |
| RHEL-07-030820 | V3R8 | The Red Hat Enterprise Linux operating system must audit all uses of the init_module and finit_module syscalls. | |
| RHEL-07-030830 | V3R8 | The Red Hat Enterprise Linux operating system must audit all uses of the delete_module syscall. | |
| RHEL-07-030840 | V3R8 | The Red Hat Enterprise Linux operating system must audit all uses of the kmod command. | |
| OL07-00-030819 | V2R14 | The Oracle Linux operating system must audit all uses of the create_module syscall. | |
| OL07-00-030820 | V2R14 | The Oracle Linux operating system must audit all uses of the init_module and finit_module syscalls. | |
| OL07-00-030830 | V2R14 | The Oracle Linux operating system must audit all uses of the delete_module syscall. | |
| OL07-00-030840 | V2R14 | The Oracle Linux operating system must audit all uses of the kmod command. | |