Critical Linux kernel flaw allows remote root attacks on MPTCP servers

Security researchers at Anthropic developed an exploit for CVE-2026-98432, a Linux kernel vulnerability that may allow unauthenticated attackers to execute commands as root on servers running MPTCP listeners. The flaw also affects ordinary TCP connections, but remote code execution has not been publicly demonstrated on servers without an MPTCP listener. There are currently no confirmed reports of exploitation in the wild.