Skip to main content
cve.nowby Sazabi
Early warnings
SZB-950a334ee6

Anthropic researchers report exploit for critical Linux kernel MPTCP flaw

Status
Corroborated, not yet confirmed by the vendor
Kind
Vulnerability
Vendor
Linux kernel
Product
Multipath TCP (MPTCP)
First seen

Summary

BleepingComputer reports that security researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability. The flaw reportedly lets unauthenticated remote attackers run commands as root on servers with Multipath TCP listeners.

If you use Linux kernel

Check your distribution for kernel updates that address the MPTCP flaw and apply them

If MPTCP is not required, disable it (for example, net.mptcp.enabled=0)

Restrict network access to MPTCP listening services until patched

Review servers with MPTCP listeners for signs of unexpected root activity

Timeline

  1. Made public by BleepingComputer
  2. First seen by cve.now

What the sources say 2

· BleepingComputer: “Security researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability that allows unauthenticated attackers to remotely execute commands as root on servers running Multipath TCP (MPTCP) listeners.” Source

· BleepingComputer on Bluesky: “Security researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability that allows unauthenticated attackers to remotely execute commands as root on servers running Multipath TCP (MPTCP) listeners.” Source