> On 30 Oct 2026, at 00:21, Alan Coopersmith <[email protected]> > wrote: > > Note that disabling MPTCP on a program-by-program basis is a fragile > mitigation. Accidentally leaving a single MPTCP listener exposed will still > leave a system vulnerable. Further, it assumes that all viable exploits for > this bug depend on MPTCP. Again, we strongly recommend upgrading to a patched > kernel version.
MPTCP can be disabled system-wide on Linux with `sysctl -w net.mptcp.enabled=0` This will, of course, upset programs that require mptcp although[1] suggests that while newly started Go programs will handle this just fine, running programs may have unexpected errors on new connections. jch [1]: https://cs.opensource.google/go/go/+/refs/tags/go1.27.3:src/net/mptcpsock_linux.go;drc=68c6a73380e82a0ea9a93c1a75ab8a38f28f3a3d;l=36
signature.asc
Description: Message signed with OpenPGP
