cross-posted from: https://sh.itjust.works/post/69184872

Every Go application since 1.24 will activate MPTCP on their sockets by default.

And I've read that this includes Syncthing, which is why I'm posting this here

Every Go application since 1.24 will activate MPTCP on their sockets by default.

And I've read that this includes Syncthing, which is why I'm posting this here

A critical vulnerability in the Linux kernel's TCP implementation has been assigned a CVSS score of 9.8, impacting multiple distributions including Ubuntu and Red Hat. The flaw involves improper handling of TCP connections and could allow remote attackers to cause denial-of-service conditions. The issue is being tracked by major Linux vendors and patches are available in upstream kernel and distribution repositories. Users are advised to update their systems promptly.