Go 1.24 MPTCP default exposes servers to Linux kernel RCE

A critical vulnerability in the Linux kernel's MPTCP implementation has been discovered, allowing remote attackers to execute code on vulnerable servers. The issue, tracked as CVE-2026-98432, affects Linux servers using MPTCP as their default protocol.

MPTCP, or Multipath TCP, is a protocol that allows for multiple paths to be used for TCP connections. However, this feature also introduces a new attack vector for remote code execution. Exploiting this vulnerability requires a malicious actor to send a specially crafted MPTCP packet to a vulnerable server.

To mitigate this issue, Linux server administrators are advised to patch their systems as soon as possible. This will ensure that the MPTCP implementation is updated to prevent the RCE attack. As a Discord server owner or webmaster, it's essential to keep your server's underlying infrastructure secure to prevent potential disruptions.

In addition to patching, it's also recommended to monitor your server's logs closely for any suspicious activity. This will help you detect and respond to any potential attacks before they cause significant damage.

As a community moderator or bot builder, it's crucial to stay informed about the latest security threats and updates. This will enable you to take proactive measures to protect your community and infrastructure.