# Linux flaw enables remote root exploit on servers using Multipath TCP

_Published Friday, October 30, 2026 at 5:50 PM EDT · Security, Infrastructure · Latest · Tier 1 — Major_

![Linux flaw enables remote root exploit on servers using Multipath TCP — Primary](https://www.bleepstatic.com/content/hl-images/2026/10/29/Linux.jpg)

Anthropic researchers demonstrated remote root command execution through CVE-2026-98432 on a Linux server running a Multipath TCP listener, BleepingComputer reported. The flaw affects kernels dating to version 4.4 and also reaches ordinary TCP connections, although remote code execution has not been publicly demonstrated without a Multipath TCP listener.

Upstream fixes and backports are available, but Ubuntu and RHEL releases still awaited updates as of October 30. Debian has released fixed packages. Multipath TCP lets connections use multiple network paths; some Go services enable it automatically. Disabling it alone does not eliminate the underlying vulnerability, and no exploitation in the wild has been confirmed.

## Sources

- [BleepingComputer](https://www.bleepingcomputer.com/news/security/critical-linux-kernel-flaw-allows-remote-root-attacks-on-mptcp-servers/)

---
Canonical: https://techandbusiness.org/newswire/tTwX4dqDXWzi2lyhju7vjF
Published: 2026-10-30T21:50:29.336Z
Story chronology: 2026-10-30T21:09:46.000Z
Retrieved: 2026-10-31T00:34:39.312Z
Publisher: Tech & Business (techandbusiness.org)