
Security
Linux: an MPTCP flaw could hand over root to remote attackers
A Linux kernel flaw, CVE-2026-98432, could let attackers run commands as root remotely, without authentication, on servers exposing an MPTCP listener. Go has enabled MPTCP by default since version 1.24, and fixes have not yet reached every distribution.