Critical Linux kernel flaw allows remote root attacks on MPTCP servers

Security researchers at Anthropic have discovered and developed an exploit for a critical vulnerability in the Linux kernel affecting servers running Multipath TCP (MPTCP) listeners. The flaw allows unauthenticated remote attackers to execute arbitrary commands with root privileges, making it a severe remote code execution vulnerability. No authentication is required to exploit the issue, significantly raising its risk profile. The vulnerability targets MPTCP, a transport protocol extension that allows multiple network paths to be used simultaneously. Servers exposed to the internet running MPTCP listeners are at high risk of full compromise. The research highlights the danger of kernel-level vulnerabilities that can be exploited remotely without credentials. System administrators running Linux servers with MPTCP enabled should apply patches or mitigations immediately.