Critical Linux kernel flaw allows remote root attacks on MPTCP servers

Anthropic researchers built an exploit for a critical Linux kernel flaw enabling unauthenticated remote code execution as root on servers with Multipath TCP listeners. The vulnerability affects MPTCP-enabled systems, allowing attackers full control without credentials. Patches are not yet widely deployed, and administrators are urged to disable MPTCP or apply vendor updates immediately to mitigate active exploitation risk.