According to Bleeping Computer, security researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability that allows unauthenticated attackers to remotely execute commands as root on servers running Multipath TCP (MPTCP) listeners.
The flaw resides in the Linux kernel and specifically impacts systems where MPTCP is enabled. When exploited, it permits remote execution of arbitrary commands with elevated privileges without requiring authentication or prior access. Researchers at Anthropic confirmed they were able to trigger the exploit against affected servers running MPTCP listeners.
No details are provided regarding the exact version range of the Linux kernel affected, nor specifics about deployment scope, number of servers impacted, or remediation status. The vulnerability is described as critical due to its ability to grant remote root capability under standard conditions involving MPTCP listener operation.
Organizations running Multipath TCP server configurations should assess whether their deployments use the vulnerable kernel component and apply appropriate updates if available. Public disclosure details from the researchers have been shared with relevant parties for coordinated response.
