diff --git a/ci/lib.sh b/ci/lib.sh
index 0a73fc7bd1c203..ee7b46b10b79b1 100755
--- a/ci/lib.sh
+++ b/ci/lib.sh
@@ -245,6 +245,13 @@ then
 
 	GIT_TEST_OPTS="--github-workflow-markup"
 	JOBS=10
+
+	case "${{ github.job }}" in
+	linux*-leaks|linux*asan*|fuzz*)
+		# https://github.com/actions/runner-images/issues/9491
+		sudo sysctl vm.mmap_rnd_bits=28
+		;;
+	esac
 elif test true = "$GITLAB_CI"
 then
 	CI_TYPE=gitlab-ci