Will Linux kernel MPTCP RCE be added to CISA KEV by Dec 2026?

Anthropic security researchers have developed a working exploit for CVE-2026-MPTCP, a critical Linux kernel flaw enabling remote unauthenticated root command execution on MPTCP-enabled servers. The vulnerability is confirmed exploitable and represents a significant RCE attack surface across production Linux infrastructure.

Resolution Criteria

Confirmed by CISA's Official Known Exploited Vulnerabilities (KEV) Catalog publication naming the CVE and confirming active exploitation evidence. Resolution via CISA.gov official advisory or press release.