Linux kernel MPTCP flaw enables remote root attacks

Security researchers at Anthropic discovered a critical Linux kernel vulnerability in Multipath TCP (MPTCP) listeners that allows unauthenticated remote attackers to execute commands as root. The flaw affects servers running MPTCP. An exploit has been developed. Administrators should prioritize patching affected kernel versions and restrict access to MPTCP listeners until patches are deployed.