Will Linux kernel MPTCP RCE (CVE-2026-MPTCP) be added to CISA KEV by Dec 31?

Anthropic security researchers disclosed a critical remote code execution vulnerability in the Linux kernel's Multipath TCP (MPTCP) implementation allowing unauthenticated remote attackers to execute commands as root on MPTCP listeners (Bleeping Computer). An exploit PoC has already been developed, making active exploitation likely in the near term.

Resolution Criteria

The vulnerability will be added to CISA's Known Exploited Vulnerabilities catalog, confirmed by official CISA KEV listing or a major vendor (Red Hat, Canonical, etc.) advisory attributing active exploitation.