Comment on: exploit doesn´t work with ipv6.disable=1

args are absolutely required. XFRM_MSG_NEWSA creates IPsec Security Associations, ESP modules (esp4/esp6) are the transport layer for those SAs. Check to see if you have those available: # Method 1: Check if modules are currently loaded lsmod | grep esp # Method 2: Check if module files exist on disk ls -la /lib/modules/$(uname -r)/kernel/net/ipv4/esp4.ko* 2>/dev/null ls -la /lib/modules/$(uname -r)/kernel/net/xfrm/esp6.ko* 2>/dev/null # Method 3: Try to load them (requires root) sudo modprobe esp4 && echo "esp4: OK" || echo "esp4: BLOCKED/MISSING" sudo modprobe esp6 && echo "esp6: OK" || echo "esp6: BLOCKED/MISSING" # Method 4: Check modprobe blacklist grep -r "esp4\|esp6" /etc/modprobe.d/ # Method 5: Check if modules can be found in module index modinfo esp4 modinfo esp6