Tech

Remote code execution on Linux systems with multipath TCP

Read full article at source ↗

Based on a feed excerpt; full article content has not been acquired. Source evidence retrieved 30/10/2026, 15:50:24 UTC.

Briefings

On October 27, 2026, Anthropic reported a remote code execution vulnerability in Linux systems using multipath TCP. The bug occurs when a retransmitted SYN packet triggers a response at connection establishment, allowing kernel memory disclosure or buffer overflows. The Go security team advised default use of multipath TCP in Go, and users should patch kernels immediately.

Key points

• On October 27, 2026, Anthropic reported a remote code execution vulnerability in Linux systems using multipath TCP.
• The vulnerability allows kernel memory disclosure or buffer overflows via a retransmitted SYN packet response.

Context

This finding addresses a critical security gap in Linux networking where multipath TCP listeners are vulnerable to remote code execution. The vulnerability affects systems using multipath TCP listeners open, and the Go security team advised default use of multipath TCP in Go.

Limitations

Evidence is limited to a single report from Anthropic on October 27, 2026. The fix involves only freeing the structure after an RCU grace period, and related bugs in other TCP stack sections remain unaddressed.

Generated by Bittrees-hosted qwen35-2b sha256:aaf42c8b7c3c on 30/10/2026, 16:14:32 UTC. Based on publisher-provided feed evidence; may not cover the full original article. Check the source for details.

View archived briefing on IPFS
bafybeibpq2rpz27chdl3f6mpkttpuefcudlxhu3uev5dsflilzwz226opu