diff --git a/.github/workflows/builds.yml b/.github/workflows/builds.yml
index 29409c4de0..ce6eb6cc31 100644
--- a/.github/workflows/builds.yml
+++ b/.github/workflows/builds.yml
@@ -1805,6 +1805,7 @@ jobs:
           CC: "clang-15"
           CXX: "clang++-15"
           RUSTFLAGS: "-C instrument-coverage"
+          SURICATA_LUA_SYS_CFLAGS: "-fsanitize=address"
       - run: ./qa/run-ossfuzz-corpus.sh
       - run: llvm-profdata-15 merge -o default.profdata $(find /tmp/ -name '*.profraw')
       - run: llvm-cov-15 show ./src/suricata -instr-profile=default.profdata --show-instantiations --ignore-filename-regex="^/root/.*" > coverage.txt
diff --git a/rust/Makefile.am b/rust/Makefile.am
index a678b1e412..e7f176c7ea 100644
--- a/rust/Makefile.am
+++ b/rust/Makefile.am
@@ -58,6 +58,9 @@ endif
 
 CARGO_ENV +=	LOCALSTATEDIR=$(e_localstatedir)
 
+# To pass specific CFLAGS to Lua.
+CARGO_ENV +=	SURICATA_LUA_SYS_CFLAGS="$(SURICATA_LUA_SYS_CFLAGS)"
+
 all-local: Cargo.toml
 	mkdir -p $(abs_top_builddir)/rust/gen
 	cd $(abs_top_srcdir)/rust && \