CVE-2026-99269

HIGH
MEDIUM Priority: 0.01 BB Relevance: 41/100
Published: 2026-11-03 Modified: 2026-11-03 First seen: 2026-11-03 Status: active

Attack Surface

Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: High
I: High
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: sched_ext: Wait for SCX_OPSS_DISPATCHING before moving tasks off DSQs A task can be found on a non-local DSQ while the CPU which dispatched it is still running ops.dequeue() and hasn't cleared SCX_OPSS_DISPATCHING. The DSQ consume and move paths don't wait for the dispatch to finish and can operate on the task concurrently with the dispatcher. Call scx_wait_dispatching() in scx_move_local_task_to_local_dsq(), unlink_dsq_and_switch_rq_lock() and move_task_between_dsqs() before they operate on the task. In scx_move_local_task_to_local_dsq(), wait before scx_resolve_local_dsq() as it may update p->scx.flags.

Affected Software (6)

VendorProductVersion
Linux Linux ebf1ccff79c43f860cbd2f9d6cfab9a462d0cb2d < cc2839946328c1618b3870d521b32bb9483d49d0
Linux Linux ebf1ccff79c43f860cbd2f9d6cfab9a462d0cb2d < 2935062be77113c1c4565ca9d0c72180449aafee
Linux Linux 7.1
Linux Linux ebf1ccff79c43f860cbd2f9d6cfab9a462d0cb2d < cc2839946328c1618b3870d521b32bb9483d49d0
Linux Linux ebf1ccff79c43f860cbd2f9d6cfab9a462d0cb2d < 2935062be77113c1c4565ca9d0c72180449aafee
Linux Linux 7.1

Bug Bounty Relevance

41 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

7.8 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.15%
Raw Score 0.001460
Percentile 3.9%
Date 2026-11-06

EPSS Trend

2026-11-06
0.00146
2026-11-05
0.00146
2026-11-04
0.00146

Intelligence Sources

mitre ref →
nvd ref →