As cited
Copy frozen at (site build).
vulnerabilities
Mutipath TCP: Use and Detection
A vulnerability in Linux's multipath TCP (MPTCP) implementation triggered renewed attention to the TCP option introduced in 2020 (RFC 8684, CVE-2026-98432 with CVSS 9.8). MPTCP allows TCP connections to split and switch between different IP addresses, enabling seamless transitions on mobile devices and higher bandwidth utilization, with IPv4 connections to Apple commonly using this protocol. The article provides technical details on MPTCP operation and detection methods across tools like Wireshark, tcpdump, Suricata, and Zeek.
Why it matters: Network defenders need to detect and understand MPTCP in traffic analysis, and system administrators should evaluate the CVE-2026-98432 patch status for Linux systems running internet-facing services that may be exploited.
- Source published
- First seen by Cybersecurity Tracker