{"uuid": "ee8f79bc-8919-4e12-85ea-d9284f8486aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53362", "type": "seen", "source": "https://gist.github.com/BeeDoubleYouKay/d2c5ddbbb1680ec4eb6de91ab4df158f", "content": "# --- 1. Pre-flight: confirm nothing is using IPv6 ---\nss -6 -lntup\nss -6 -ntup\nip -6 addr show\ngrep -i ListenAddress /etc/xrdp/sesman.ini\ngrep -r CMDLINE /etc/default/grub.d/\n\n# --- 2. Add the kernel parameter ---\ncp /etc/default/grub /etc/default/grub.bak\nsed -i 's/^GRUB_CMDLINE_LINUX_DEFAULT=\"\\(.*\\)\"/GRUB_CMDLINE_LINUX_DEFAULT=\"\\1 ipv6.disable=1\"/' /etc/default/grub\ngrep GRUB_CMDLINE_LINUX_DEFAULT /etc/default/grub\nupdate-grub\n\n# --- 3. Restrict unprivileged user namespaces (skip if you run rootless containers) ---\necho 'kernel.unprivileged_userns_clone = 0' > /etc/sysctl.d/99-cve-2026-53362.conf\nsysctl --system\n\n# --- 4. Reboot ---\nreboot\n\n# --- 5. Verify after reboot ---\ncat /proc/cmdline | grep -o ipv6.disable=1\nls /proc/net/if_inet6\nip -6 addr\npython3 -c 'import socket; socket.socket(socket.AF_INET6, socket.SOCK_DGRAM)'\nsysctl kernel.unprivileged_userns_clone\nss -lntp | grep -E '3350|3389|:22 '\nsystemctl status xrdp xrdp-sesman --no-pager", "creation_timestamp": "2026-09-16T08:43:41.377779Z"}