Protecting against CVE-2026-98432
Summary
The article explains CVE-2026-98432, a use-after-free vulnerability affecting Linux kernel IPv4 TCP handling. It notes an Anthropic-discovered exploit using Multipath TCP that can lead to remote code execution, and emphasizes upgrading to a patched kernel as the primary mitigation. It also discusses Go's default enabling of MPTCP on Linux and how to temporarily disable it, while cautioning that such workarounds are fragile and that upgrading is the recommended path.