Will Linux kernel MPTCP RCE be actively exploited in the wild by Dec 31, 2026?

Anthropic security researchers have published a proof-of-concept exploit for a critical Linux kernel vulnerability affecting Multipath TCP (MPTCP) servers, allowing unauthenticated remote code execution as root. The PoC is publicly available, raising immediate exploitation risk.

Resolution Criteria

YES if public exploit code or documented active exploitation of the MPTCP kernel RCE appears in threat intelligence reports, security vendor advisories, or CISA KEV/alerts by Dec 31, 2026. NO if no wild exploitation is documented by that date.