Protecting against CVE-2026-98432 groups.google.com

The Go Security Team says CVE-2026-98432 is a Linux kernel use-after-free affecting IPv4 TCP handling; an exploit demonstrated by Anthropic achieved remote code execution against a server with an MPTCP listener. It recommends upgrading to a patched kernel, noting Go 1.24 enables MPTCP by default on Linux and offering `GODEBUG=multipathtcp=0` as a fragile, program-level mitigation.