The bug doesn't mention MPTCP, is MPTCP required for the bug to be exploitable?

No, but MPTCP makes it more likely to be exploited, supposedly.

SMB in the kernel and binding io_uring to DMABUF doesn't look pretty safe either.

Torvalds needs to borrow Rust code from Asterinas (and maybe Redox) ASAP.

Years ago I talked to an ex-msft guy whose comment on Samba was "they're repeating all of the same mistakes we made". It was a tongue-in-cheek comment about how compatible Samba was with Microsoft's SMB implementation.