Seems like anybody with an open TCP port and SACK enabled (the default) is vulnerable.