Will Linux kernel MPTCP RCE (PoC by Anthropic) be added to CISA KEV by Dec 2026?

Security researchers at Anthropic have developed a public exploit for a critical Linux kernel vulnerability affecting Multipath TCP (MPTCP) listeners, enabling unauthenticated remote root code execution. This represents a significant infrastructure risk for servers running MPTCP, particularly in cloud and edge environments.

Resolution Criteria

CISA Known Exploited Vulnerabilities (KEV) catalog adds the MPTCP kernel CVE with confirmed active exploitation evidence or PoC publication date. Verification via official CISA announcements or reputable security advisories naming the specific CVE.