MPTCP

Trends

1
Go programs exposed to Linux kernel MPTCP vulnerability●Go programs enable MPTCP by default, exposing them to Linux CVE-2026-98432Yhn Sport Golf2047 min ago
Go programs are reported to enable Multipath TCP (MPTCP) by default, which exposes them to the Linux kernel vulnerability CVE-2026-98432. Developers are discussing the security implications, since applications written in Go may be affected without any explicit configuration. The Go project has published an announcement addressing the issue, and maintainers and users are debating whether default-on MPTCP is a safe choice and what mitigation steps are needed.
2
Critical Linux kernel flaw enables remote root attacks▼cve 2026 98432GgoogleFR20021 h ago
Security researchers have flagged a critical vulnerability in the Linux kernel, tracked as CVE-2026-98432, affecting servers with MPTCP (Multipath TCP) enabled. The flaw allows remote attackers to gain root-level control of affected systems without authentication. Administrators are urged to apply kernel patches promptly, and discussion is focused on which distributions are affected and how widely MPTCP is deployed in production.
3
Critical Linux kernel flaw CVE-2026-98432 draws security attention●🤖 CVE-2026-98432 (CVSS 9.8, Linux kernel): race condition in IPv4 TCP connection setup causes a use-after-free. Remote uMmastodon Technology Cybersecurity52 d ago
A newly disclosed vulnerability, CVE-2026-98432, rated CVSS 9.8, affects the Linux kernel: a race condition in IPv4 TCP connection setup triggers a use-after-free, allowing remote unauthenticated attackers to gain root on hosts with an MPTCP listening socket. Discussion notes that Go 1.24+ enables MPTCP by default, widening exposure, and that an exploit was written with Anthropic's Claude. Upstream patches are available.