Mitigation is to retire and wait for the singularity.
Don't use MPTCP is the first mitigation, but my understanding is this might be exploitable without MPTCP.
Filtering packets with ip-options set may also help, but it seems Akami is already doing that at the edge.
Filtering packets with ip-options set may also help, but it seems Akami is already doing that at the edge.