Medium 5.5Published May 27, 2026

CVE-2026-45857scsi: csiostor: Fix dereference of null pointer rn

Updated under an hour ago (Oct 26, 2026, 2:30 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: scsi: csiostor: Fix dereference of null pointer rn The error exit path when rn is NULL ends up deferencing the null pointer rn via the use of the macro CSIO_INC_STATS. Fix this by adding a new error return path label after the use of the macro to avoid the deference.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: May 27, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from a3667aaed5698b84bad2f1b3f71adc86499f4bc6 before 16ccbfddcb32365138c806cf572e69b42a193c5c; from a3667aaed5698b84bad2f1b3f71adc86499f4bc6 before 44ef9f81392de885883f73b9f5c43936a82ae9d7; from a3667aaed5698b84bad2f1b3f71adc86499f4bc6 before 526ea3c0ccd495b0079db3e28fdddd51c1bf01f7; from a3667aaed5698b84bad2f1b3f71adc86499f4bc6 before 25d623f0d77c11a256a54e860d00c239aa9a2583; from a3667aaed5698b84bad2f1b3f71adc86499f4bc6 before 6037124dbf675fbd0a6248aaf04cf07387b8c323; from a3667aaed5698b84bad2f1b3f71adc86499f4bc6 before 25ab5e97d3c5f3ed594b4a65d1cc99dc24756681; from a3667aaed5698b84bad2f1b3f71adc86499f4bc6 before 3bbbab7b6949c76df64210348adbefedaabbf549; from a3667aaed5698b84bad2f1b3f71adc86499f4bc6 before 1982257570b84dc33753d536dd969fd357a014e9	CNA record
linux linux_kernel linux:linux_kernel	from 3.8 before 5.10.252; from 5.11 before 5.15.202; from 5.16 before 6.1.165; from 6.2 before 6.6.128; from 6.7 before 6.12.75; from 6.13 before 6.18.14; from 6.19 before 6.19.4	NVD

References

References

https://git.kernel.org/stable/c/16ccbfddcb32365138c806cf572e69b42a193c5c	patch
https://git.kernel.org/stable/c/44ef9f81392de885883f73b9f5c43936a82ae9d7	patch
https://git.kernel.org/stable/c/526ea3c0ccd495b0079db3e28fdddd51c1bf01f7	patch
https://git.kernel.org/stable/c/25d623f0d77c11a256a54e860d00c239aa9a2583	patch
https://git.kernel.org/stable/c/6037124dbf675fbd0a6248aaf04cf07387b8c323	patch
https://git.kernel.org/stable/c/25ab5e97d3c5f3ed594b4a65d1cc99dc24756681	patch
https://git.kernel.org/stable/c/3bbbab7b6949c76df64210348adbefedaabbf549	patch
https://git.kernel.org/stable/c/1982257570b84dc33753d536dd969fd357a014e9	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.