CVE-2026-45857
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
In the Linux kernel, a vulnerability was found in the csiostor driver where a null pointer rn is dereferenced in the error exit path via the CSIO_INC_STATS macro. The fix adds a new error return label after the macro usage.
Risk Assessment
The risk involves a potential kernel panic or system crash when handling an error in the csiostor SCSI driver, which could disrupt services.
Recommendation
Immediately update the Linux kernel to a version containing the fix (commit that removes the null pointer dereference). Monitor official security advisories from your distribution.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: scsi: csiostor: Fix dereference of null pointer rn The error exit path when rn is NULL ends up deferencing the null pointer rn via the use of the macro CSIO_INC_STATS. Fix this by adding a new error return path label after the use of the macro to avoid the deference.