Last week, an often-ignored TCP option, introduced in 2020, made the news due to a new vulnerability in Linux's implementation (RFC 8684, CVE-2026-98432) Instead of looking at the vulnerability, I am using this diary to talk a bit about multipath TCP (MPTCP) and how you may see it used in your network. What is MPTCP? Traditionally, TCP is a connection-oriented protocol.

Read the full article at SANS Internet Storm Center →