CVE-2026-45857 - Vulnerability Details

- scsi: csiostor: Fix dereference of null pointer rn

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: csiostor: Fix dereference of null pointer rn

The error exit path when rn is NULL ends up deferencing the null pointer rn
via the use of the macro CSIO_INC_STATS. Fix this by adding a new error
return path label after the use of the macro to avoid the deference.

Published: 2026-05-27

Score: 5.5 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`a3667aaed5698b84bad2f1b3f71adc86499f4bc6`	affected	< 16ccbfddcb32365138c806cf572e69b42a193c5c
`a3667aaed5698b84bad2f1b3f71adc86499f4bc6`	affected	< 44ef9f81392de885883f73b9f5c43936a82ae9d7
`a3667aaed5698b84bad2f1b3f71adc86499f4bc6`	affected	< 526ea3c0ccd495b0079db3e28fdddd51c1bf01f7
`a3667aaed5698b84bad2f1b3f71adc86499f4bc6`	affected	< 25d623f0d77c11a256a54e860d00c239aa9a2583
`a3667aaed5698b84bad2f1b3f71adc86499f4bc6`	affected	< 6037124dbf675fbd0a6248aaf04cf07387b8c323
`a3667aaed5698b84bad2f1b3f71adc86499f4bc6`	affected	< 25ab5e97d3c5f3ed594b4a65d1cc99dc24756681
`a3667aaed5698b84bad2f1b3f71adc86499f4bc6`	affected	< 3bbbab7b6949c76df64210348adbefedaabbf549
`a3667aaed5698b84bad2f1b3f71adc86499f4bc6`	affected	< 1982257570b84dc33753d536dd969fd357a014e9

Linux

affected

Version	Status	Constraints
`3.8`	affected	—
`0`	unaffected	< 3.8
`5.10.252`	unaffected	≤ 5.10.*
`5.15.202`	unaffected	≤ 5.15.*
`6.1.165`	unaffected	≤ 6.1.*
`6.6.128`	unaffected	≤ 6.6.*
`6.12.75`	unaffected	≤ 6.12.*
`6.18.14`	unaffected	≤ 6.18.*
`6.19.4`	unaffected	≤ 6.19.*
`7.0`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[a3667aaed5698b84bad2f1b3f71adc86499f4bc6,16ccbfddcb32365138c806cf572e69b42a193c5c)`	affected	code_commit	—
`[a3667aaed5698b84bad2f1b3f71adc86499f4bc6,44ef9f81392de885883f73b9f5c43936a82ae9d7)`	affected	code_commit	—
`[a3667aaed5698b84bad2f1b3f71adc86499f4bc6,526ea3c0ccd495b0079db3e28fdddd51c1bf01f7)`	affected	code_commit	—
`[a3667aaed5698b84bad2f1b3f71adc86499f4bc6,25d623f0d77c11a256a54e860d00c239aa9a2583)`	affected	code_commit	—
`[a3667aaed5698b84bad2f1b3f71adc86499f4bc6,6037124dbf675fbd0a6248aaf04cf07387b8c323)`	affected	code_commit	—
`[a3667aaed5698b84bad2f1b3f71adc86499f4bc6,25ab5e97d3c5f3ed594b4a65d1cc99dc24756681)`	affected	code_commit	—
`[a3667aaed5698b84bad2f1b3f71adc86499f4bc6,3bbbab7b6949c76df64210348adbefedaabbf549)`	affected	code_commit	—
`[a3667aaed5698b84bad2f1b3f71adc86499f4bc6,1982257570b84dc33753d536dd969fd357a014e9)`	affected	code_commit	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`3.8`	affected	generic	—
`[0,3.8)`	unaffected	generic	—
`[5.10.252,5.11.0)`	unaffected	semver	—
`[5.15.202,5.16.0)`	unaffected	semver	—
`[6.1.165,6.2.0)`	unaffected	semver	—
`[6.6.128,6.7.0)`	unaffected	semver	—
`[6.12.75,6.13.0)`	unaffected	semver	—
`[6.18.14,6.19.0)`	unaffected	semver	—
`[6.19.4,6.20.0)`	unaffected	semver	—
`[7.0,*]`	unaffected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

Source	ID	Title
Debian DLA	DLA-4606-1	linux security update
Ubuntu USN	USN-8492-1	Linux kernel vulnerabilities

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00156.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/16ccbfddcb32365138c806cf572e69b42a193c5c
https://git.kernel.org/stable/c/1982257570b84dc33753d536dd969fd357a014e9
https://git.kernel.org/stable/c/25ab5e97d3c5f3ed594b4a65d1cc99dc24756681
https://git.kernel.org/stable/c/25d623f0d77c11a256a54e860d00c239aa9a2583
https://git.kernel.org/stable/c/3bbbab7b6949c76df64210348adbefedaabbf549
https://git.kernel.org/stable/c/44ef9f81392de885883f73b9f5c43936a82ae9d7
https://git.kernel.org/stable/c/526ea3c0ccd495b0079db3e28fdddd51c1bf01f7
https://git.kernel.org/stable/c/6037124dbf675fbd0a6248aaf04cf07387b8c323
https://lore.kernel.org/linux-cve-announce/2026052709-CVE-2026-45857-0a4f@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2026-45857
https://www.cve.org/CVERecord?id=CVE-2026-45857

History

Thu, 28 May 2026 12:15:00 +0000

Type	Values Removed	Values Added
References		https://lore.kernel.org/linux-cve-announce/2026052709-CVE-2026-45857-0a4f@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2026-45857 https://www.cve.org/CVERecord?id=CVE-2026-45857
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Moderate`

Wed, 27 May 2026 17:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-476

Wed, 27 May 2026 14:15:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: scsi: csiostor: Fix dereference of null pointer rn The error exit path when rn is NULL ends up deferencing the null pointer rn via the use of the macro CSIO_INC_STATS. Fix this by adding a new error return path label after the use of the macro to avoid the deference.
Title		scsi: csiostor: Fix dereference of null pointer rn
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/16ccbfddcb32365138c806cf572e69b42a193c5c https://git.kernel.org/stable/c/1982257570b84dc33753d536dd969fd357a014e9 https://git.kernel.org/stable/c/25ab5e97d3c5f3ed594b4a65d1cc99dc24756681 https://git.kernel.org/stable/c/25d623f0d77c11a256a54e860d00c239aa9a2583 https://git.kernel.org/stable/c/3bbbab7b6949c76df64210348adbefedaabbf549 https://git.kernel.org/stable/c/44ef9f81392de885883f73b9f5c43936a82ae9d7 https://git.kernel.org/stable/c/526ea3c0ccd495b0079db3e28fdddd51c1bf01f7 https://git.kernel.org/stable/c/6037124dbf675fbd0a6248aaf04cf07387b8c323

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-05-27T12:15:35.967Z

Updated: 2026-05-27T12:15:35.967Z

Reserved: 2026-05-13T15:03:33.079Z

Link: CVE-2026-45857

Vulnrichment

No data.

NVD

Status : Awaiting Analysis

Published: 2026-05-27T14:16:57.793

Modified: 2026-06-17T10:52:37.043

Link: CVE-2026-45857

Redhat

Severity : Moderate

Publid Date: 2026-05-27T00:00:00Z

Links: CVE-2026-45857 - Bugzilla

OpenCVE Enrichment

Updated: 2026-05-28T13:45:14Z

Weaknesses

CWE-476

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object