Not to defend Canonical, but you can mitigate this bug by dropping any and all packets with TCP options in the headers.