CVE-2026-45857
Awaiting Analysis Awaiting Analysis - Queue
Null Pointer Dereference in Linux Kernel SCSI CSIostor Driver

Publication date: 2026-05-27

Last updated on: 2026-05-27

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: scsi: csiostor: Fix dereference of null pointer rn The error exit path when rn is NULL ends up deferencing the null pointer rn via the use of the macro CSIO_INC_STATS. Fix this by adding a new error return path label after the use of the macro to avoid the deference.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-05-27
Last Modified
2026-05-27
Generated
2026-06-16
AI Q&A
2026-05-27
EPSS Evaluated
2026-06-15
NVD
CVE-2026-45857
EUVD
EUVD-2026-32323
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
linux linux_kernel *
linux_kernel linux_kernel *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Impact Analysis

This vulnerability in the Linux kernel involves a null pointer dereference in the scsi: csiostor component. If triggered, it could cause the kernel to crash or behave unexpectedly due to the null pointer dereference during error handling.

Executive Summary

This vulnerability exists in the Linux kernel's scsi csiostor component. It involves a null pointer dereference caused when the variable 'rn' is NULL. The error exit path incorrectly dereferences this null pointer through the macro CSIO_INC_STATS. The issue was fixed by adding a new error return path to avoid dereferencing the null pointer.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-45857. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart