This seemed quite problematic. Attackers can send crafted packets to your server to crash the kernel or DDoS it. Remote Code Execution is possible but unlikely (although … AI).
There is currently no patch.
The good news: if you’re behind Cloudflare Proxy, that already filters out the bad packets.
Also servers on Hetzner seem to be fine, as their edge network also filters them out.
Its possible to add an IPtables rule to filter out the packets. I’m not going to post it here, as I don’t want to be responsible for breaking people’s servers! Maybe your favourite AI can help.