@malwaretech if you happen to have a non-Linux TCP terminating proxy in your network path, you should be safe though.

Something like an F5 BigIP (data plane TCP stack goes through a custom micro kernel) in full proxy mode with MPTCP disabled (default) should protect backends behind it*, because it handles a Client <-> F5 TCP connection and establishes its own TCP handshake with backend systems.

* caveat: as far as I know, F5 haven't explicitly said their microkernel is safe against this CVE