@malwaretech MPTCP seems to be a path to exploit the bug but not a requirement. Red Hat gives a NFT rule to workaround the bug and avoid exploits that would not rely on MPTCP:

table inet cve_2026_98432 {
    chain input {
        type filter hook input priority -310; policy accept;
        ip protocol tcp ip hdrlength > 5 counter drop
    }
}

https://access.redhat.com/security/vulnerabilities/RHSB-2026-016