MPTCP uses TCP options fields, the vulnerability is in IP options.