Mutipath TCP: Use and Detection, (Mon, Nov 2nd)

A previously overlooked TCP option known as Multipath TCP (MPTCP), introduced in 2020 via RFC 8684, has come under scrutiny due to a newly disclosed vulnerability in Linux's implementation. The vulnerability is tracked as CVE-2026-98432 and affects Linux systems utilizing the MPTCP protocol. MPTCP allows a single TCP connection to use multiple network paths simultaneously, improving redundancy and throughput. The article discusses both the use cases of Multipath TCP and methods for detecting its presence in network traffic. Security teams are advised to be aware of MPTCP-related traffic and monitor for potential exploitation attempts targeting this vulnerability.