A remotely exploitable use-after-free bug affects Linux systems with multipath TCP listeners, caused by a race between handling a retransmitted SYN and connection establishment. The fix delays freeing the structure until an RCU grace period; Go programs use multipath TCP by default, so users should apply patched kernels.