CVE-2026-98864

In the Linux kernel, the following vulnerability has been resolved: sched_ext: Wait for SCX_OPSS_DISPATCHING before reenqueueing a task ebf1ccff79c4 ("sched_ext: Fix ops.dequeue() semantics") moved the final ops_state store in scx_dispatch_enqueue() after the DSQ unlock so that the custody update and ops.dequeue() precede it. A task can thus be found on a DSQ while still SCX_OPSS_DISPATCHING. The dequeue and core-sched pick paths wait for the state to clear in ops_dequeue() but the reenqueue paths don't. A reenqueue in that window runs ops.enqueue() and sets SCX_OPSS_QUEUED before the dispatch has completed. The dispatcher's final store then overwrites it with SCX_OPSS_NONE and finish_dispatch() drops every later dispatch of the task. Wait for SCX_OPSS_DISPATCHING to clear before dequeueing a task for reenqueue, the same way ops_dequeue() does.

• https://git.kernel.org/stable/c/43457bf6550044c40bd6d3fcdf9ea66f5a55d139
• https://git.kernel.org/stable/c/7de9a6fb44eae4f05e68c805d58b9c618815adfa

Published

Oct 18, 2026

Last Modified

Oct 19, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-98859In the Linux kernel, the following vulnerability has been re…
• CVE-2026-9886Use after free in Base in Google Chrome on Mac prior to 148.…9.6
• CVE-2026-98860In the Linux kernel, the following vulnerability has been re…
• CVE-2026-98861In the Linux kernel, the following vulnerability has been re…
• CVE-2026-98862In the Linux kernel, the following vulnerability has been re…
• CVE-2026-98863In the Linux kernel, the following vulnerability has been re…
• CVE-2026-98865In the Linux kernel, the following vulnerability has been re…
• CVE-2026-98866In the Linux kernel, the following vulnerability has been re…
• CVE-2026-98867In the Linux kernel, the following vulnerability has been re…
• CVE-2026-98868In the Linux kernel, the following vulnerability has been re…
• CVE-2026-98869In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-9887Use after free in Proxy in Google Chrome prior to 148.0.7778…8.8