Yhn SportGolf first seen 1 d ago, last 27 min ago, peak #2

Go programs exposed to Linux MPTCP vulnerability by default

Original: Go programs enable MPTCP by default, exposing them to Linux CVE-2026-98432

Go developers are being alerted that Go programs enable Multipath TCP by default, which exposes them to the Linux kernel vulnerability CVE-2026-98432. The Go security announcement has drawn attention because many applications may be affected without developers realizing MPTCP is active. Discussions are focusing on whether the default-on behavior was the right choice and what mitigations are needed.

Why now: A newly disclosed Linux kernel vulnerability affects Go applications that use MPTCP by default, prompting a security announcement.

GoLinux kernelCVE-2026-98432MPTCPGolang security team

Open on hn →

Evidence

• Go programs enable MPTCP by default, exposing them to Linux CVE-2026-98432 · acossta · 20

API: https://socialmediatrends-api.osmike.com/v1/trends/4195154