Go programs listening on TCP have multipath enabled.

So they do. Also they mention in the golang-announce bulletin that MPTCP might not even be required for exploitation, it's just that the PoC requires MPTCP.

	▲	snizovtsev 2 hours ago \| parent [-]
		The patch itself isn't related to MPTCP, but the bug is hard to exploit. AFAIK, Anthropic is the only ones who claimed exploitation using their unlimited frontier models without safety restrictions. So non-MPTCP configurations may also be vulnerable, but exploiting them could require even more resources. I've tried to trigger KASAN using Qwen 3.8 27B @ local RTX3090 - no success after 96 hours.