Linux kernel TCP RCE vulnerability (CVE-2026-98432)

Hi. I don’t see this being discussed anywhere. Meanwhile Ubuntu is being extremely slow with this fix. It makes me question the sanity of Ubuntu even more than usually.

What do the project maintainers think on the topic? Debian has shipped the fix on Oct 16.

I don’t believe it is used in MiaB, or the underlying protocols. But, if you feel the need to, login to your box, and disable it:

sudo systctl -w net.mptcp.enabled=0

To check on it’s status:

sysctl net.mptcp.enabled

To view the status of Ubuntu’s hard work on the patch:

https://ubuntu.com/security/CVE-2026-98432

Here are the official Mitigation Instructions, different than above:

https://ubuntu.com/security/CVE-2026-98432#mitigation