A race condition in the Linux kernel scheduler allows a task that is in the SCX_OPSS_DISPATCHING state to be requeued before the dispatch completes. This overwrites the task’s state and causes the dispatcher to drop subsequent dispatches of that task, resulting in loss of task execution and erratic scheduling behavior. The flaw does not provide a direct code execution or information disclosure vector, but it can degrade system responsiveness and availability.

All Linux kernel installations that include the vulnerable scheduling code. Any kernel version prior to the commit that introduced the fix is affected. Distribution maintainers should review kernel change logs for the relevant commit to determine whether their current kernel includes the patch.

The CVSS score is 4.7 and the EPSS score is below 1%, indicating low to moderate exploitation probability. The vulnerability is not listed in CISA KEV. Based on the description, it is inferred that the attack vector requires local access with sufficient privileges to influence kernel scheduling behavior, such as a privileged user or a process with elevated capabilities. Because the flaw causes loss of task dispatches, an attacker can potentially force the host into a denial‑of‑service state. The risk is moderate until a patched kernel is deployed.