What's the mitigation for this? There's no patches available yet https://ubuntu.com/security/CVE-2026-98432

Mitigation is to retire and wait for the singularity.

Don't use MPTCP is the first mitigation, but my understanding is this might be exploitable without MPTCP.

Filtering packets with ip-options set may also help, but it seems Akami is already doing that at the edge.

Debian does have a patch up