Skip to content

docs: document Linux MPTCP mitigation - #2817

Open
dajiaohuang wants to merge 1 commit into
php:mainfrom
dajiaohuang:docs/cve-2026-98432-mptcp-note
Open

dajiaohuang wants to merge 1 commit into
php:mainfrom
dajiaohuang:docs/cve-2026-98432-mptcp-note

Conversation

@dajiaohuang

Copy link
Copy Markdown

Summary

  • Add production guidance for CVE-2026-98432 and Go's multipathtcp default.
  • Clarify that GODEBUG=multipathtcp=0 only mitigates the published MPTCP exploit path and does not replace a patched Linux kernel.

Closes #2806.

Verification

  • git diff --check passed.
  • Go tests were not run; this change only edits Markdown documentation.

@henderkes

Copy link
Copy Markdown
Contributor

...why? I fail to see how this is our resposibility and it will be old news in a few days. Just keep your OS up to date.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Considerer documenting / disabling MPTCP by default due to CVE-2026-98432

2 participants