{"id":246246,"date":"2026-10-31T03:26:55","date_gmt":"2026-10-31T08:26:55","guid":{"rendered":"https:\/\/lifeboat.com\/blog\/2026\/10\/critical-linux-kernel-flaw-allows-remote-root-attacks-on-mptcp-servers"},"modified":"2026-10-31T03:26:55","modified_gmt":"2026-10-31T08:26:55","slug":"critical-linux-kernel-flaw-allows-remote-root-attacks-on-mptcp-servers","status":"publish","type":"post","link":"https:\/\/lifeboat.com\/blog\/2026\/10\/critical-linux-kernel-flaw-allows-remote-root-attacks-on-mptcp-servers","title":{"rendered":"Critical Linux kernel flaw allows remote root attacks on MPTCP servers"},"content":{"rendered":"\n<p>Security researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability that allows unauthenticated attackers to remotely execute commands as root on servers running Multipath TCP (MPTCP) listeners.<\/p>\n<p>The flaw, tracked as <a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/cve-2026-98432\" target=\"_blank\" rel=\"nofollow noopener\">CVE-2026\u201398432<\/a>, also affects ordinary TCP connections, although remote code execution has not been publicly demonstrated on servers without an MPTCP listener.<\/p>\n<p>Multipath TCP (MPTCP) is a TCP feature that lets a single connection use multiple network paths at the same time to improve performance and reliability. It is commonly used in environments where devices have multiple network connections, such as Wi-Fi and cellular networks.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Security researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability that allows unauthenticated attackers to remotely execute commands as root on servers running Multipath TCP (MPTCP) listeners. The flaw, tracked as CVE-2026\u201398432, also affects ordinary TCP connections, although remote code execution has not been publicly demonstrated on servers without an MPTCP [\u2026]<\/p>\n","protected":false},"author":427,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1523,418,1492],"tags":[],"class_list":["post-246246","post","type-post","status-publish","format-standard","hentry","category-computing","category-internet","category-security"],"_links":{"self":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/246246","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/users\/427"}],"replies":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/comments?post=246246"}],"version-history":[{"count":0,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/246246\/revisions"}],"wp:attachment":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/media?parent=246246"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/categories?post=246246"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/tags?post=246246"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}