CVE-2026-99269

High

Description

In the Linux kernel, the following vulnerability has been resolved: sched_ext: Wait for SCX_OPSS_DISPATCHING before moving tasks off DSQs A task can be found on a non-local DSQ while the CPU which dispatched it is still running ops.dequeue() and hasn't cleared SCX_OPSS_DISPATCHING. The DSQ consume and move paths don't wait for the dispatch to finish and can operate on the task concurrently with the dispatcher. Call scx_wait_dispatching() in scx_move_local_task_to_local_dsq(), unlink_dsq_and_switch_rq_lock() and move_task_between_dsqs() before they operate on the task. In scx_move_local_task_to_local_dsq(), wait before scx_resolve_local_dsq() as it may update p->scx.flags.

SeverityHigh
CVSS7.8
Exploit probability—
ProductLinux
PublishedNov 3, 2026
First seenNov 4, 2026

How to fix

Update
  • Linux Linuxcc2839946328c1618b3870d521b32bb9483d49d0, 2935062be77113c1c4565ca9d0c72180449aafee or later

Affected products

ProductAffected versionsFixed in
Linux Linuxebf1ccff79c43f860cbd2f9d6cfab9a462d0cb2d ≤ v < cc2839946328c1618b3870d521b32bb9483d49d0, ebf1ccff79c43f860cbd2f9d6cfab9a462d0cb2d ≤ v < 2935062be77113c1c4565ca9d0c72180449aafee, 7.1cc2839946328c1618b3870d521b32bb9483d49d0, 2935062be77113c1c4565ca9d0c72180449aafee

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.