Not to defend Canonical, but you can mitigate this bug by dropping any and all packets with TCP options in the headers.

Redhat didn't release a patch until yesterday, so no doubt the same applies to them?