Comment by fractorial
3 days ago
From TFA:
> Note that disabling MPTCP on a program-by-program basis is a fragile mitigation. Accidentally leaving a single MPTCP listener exposed will still leave a system vulnerable. Further, it assumes that all viable exploits for this bug depend on MPTCP. Again, we strongly recommend upgrading to a patched kernel version
Does `sysctl -w net.mptcp.enabled=0` work?
hopefully it doesn't hurt. I've set it just incase.
The title is highlighting an unexpected exposure path. (Not my submission.) An unfortunately common combination. Agreed that the issue is in Linux, somehow the go surface area makes the situation much worse though.