What is CVE-2026-99269?

CVE-2026-99269 is a high-severity vulnerability in Linux. CVSS score: 7.8/10. Published 2026-11-03.

How severe is CVE-2026-99269?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Linux

CVE-2026-99269

In the Linux kernel, the following vulnerability has been resolved: sched_ext: Wait for SCX_OPSS_DISPATCHING before moving tasks off DSQs A task can be found on a non-local DSQ while the CPU which dispatched it is still running ops.dequeue() and hasn't cleared SCX_OPSS_DISPATCHING. The DSQ consume and move paths don't wait for the dispatch to finish and can operate on the task concurrently with the dispatcher. Call scx_wait_dispatching() in scx_move_local_task_to_local_dsq(), unlink_dsq_and_switch_rq_lock() and move_task_between_dsqs() before they operate on the task. In scx_move_local_task_to_local_dsq(), wait before scx_resolve_local_dsq() as it may update p->scx.flags.

Published 2026-11-03 · last modified 2026-11-03.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

EPSS exploit prediction

No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.

Affected products

Linux — versions 7.1

References

Frequently asked questions

What is CVE-2026-99269?: CVE-2026-99269 is a high-severity vulnerability in Linux. CVSS score: 7.8/10. Published 2026-11-03.
How severe is CVE-2026-99269?: High severity. CVSS v3 base score is 7.8 out of 10.