{"id":"CVE-2026-45857","title":"scsi: csiostor: Fix dereference of null pointer rn","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: csiostor: Fix dereference of null pointer rn\n\nThe error exit path when rn is NULL ends up deferencing the null pointer rn\nvia the use of the macro CSIO_INC_STATS.…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= a3667aaed5698b84bad2f1b3f71adc86499f4bc6 < 16ccbfddcb32365138c806cf572e69b42a193c5c","Linux >= a3667aaed5698b84bad2f1b3f71adc86499f4bc6 < 44ef9f81392de885883f73b9f5c43936a82ae9d7","Linux >= a3667aaed5698b84bad2f1b3f71adc86499f4bc6 < 526ea3c0ccd495b0079db3e28fdddd51c1bf01f7","Linux >= a3667aaed5698b84bad2f1b3f71adc86499f4bc6 < 25d623f0d77c11a256a54e860d00c239aa9a2583","Linux >= a3667aaed5698b84bad2f1b3f71adc86499f4bc6 < 6037124dbf675fbd0a6248aaf04cf07387b8c323","Linux >= a3667aaed5698b84bad2f1b3f71adc86499f4bc6 < 25ab5e97d3c5f3ed594b4a65d1cc99dc24756681","Linux >= a3667aaed5698b84bad2f1b3f71adc86499f4bc6 < 3bbbab7b6949c76df64210348adbefedaabbf549","Linux >= a3667aaed5698b84bad2f1b3f71adc86499f4bc6 < 1982257570b84dc33753d536dd969fd357a014e9","Linux 3.8"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T15:42:50.516306Z"},"published":"2026-05-27","updated":"2026-11-06","sourceUpdated":"2026-11-06T15:53:09.648Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-45857","references":[{"url":"https://git.kernel.org/stable/c/16ccbfddcb32365138c806cf572e69b42a193c5c"},{"url":"https://git.kernel.org/stable/c/44ef9f81392de885883f73b9f5c43936a82ae9d7"},{"url":"https://git.kernel.org/stable/c/526ea3c0ccd495b0079db3e28fdddd51c1bf01f7"},{"url":"https://git.kernel.org/stable/c/25d623f0d77c11a256a54e860d00c239aa9a2583"},{"url":"https://git.kernel.org/stable/c/6037124dbf675fbd0a6248aaf04cf07387b8c323"},{"url":"https://git.kernel.org/stable/c/25ab5e97d3c5f3ed594b4a65d1cc99dc24756681"},{"url":"https://git.kernel.org/stable/c/3bbbab7b6949c76df64210348adbefedaabbf549"},{"url":"https://git.kernel.org/stable/c/1982257570b84dc33753d536dd969fd357a014e9"}],"tags":["cve.org"],"epss":0.0016,"epssPercentile":0.05256,"ingestedAt":"2026-11-06T16:57:43.395Z","slug":"CVE-2026-45857","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nscsi: csiostor: Fix dereference of null pointer rn\n\nThe error exit path when rn is NULL ends up deferencing the null pointer rn\nvia the use of the macro CSIO_INC_STATS. Fix this by adding a new error\nreturn path label after the use of the macro to avoid the deference.\n\n## Affected\n\n- `Linux >= a3667aaed5698b84bad2f1b3f71adc86499f4bc6 < 16ccbfddcb32365138c806cf572e69b42a193c5c`\n- `Linux >= a3667aaed5698b84bad2f1b3f71adc86499f4bc6 < 44ef9f81392de885883f73b9f5c43936a82ae9d7`\n- `Linux >= a3667aaed5698b84bad2f1b3f71adc86499f4bc6 < 526ea3c0ccd495b0079db3e28fdddd51c1bf01f7`\n- `Linux >= a3667aaed5698b84bad2f1b3f71adc86499f4bc6 < 25d623f0d77c11a256a54e860d00c239aa9a2583`\n- `Linux >= a3667aaed5698b84bad2f1b3f71adc86499f4bc6 < 6037124dbf675fbd0a6248aaf04cf07387b8c323`\n- `Linux >= a3667aaed5698b84bad2f1b3f71adc86499f4bc6 < 25ab5e97d3c5f3ed594b4a65d1cc99dc24756681`\n- `Linux >= a3667aaed5698b84bad2f1b3f71adc86499f4bc6 < 3bbbab7b6949c76df64210348adbefedaabbf549`\n- `Linux >= a3667aaed5698b84bad2f1b3f71adc86499f4bc6 < 1982257570b84dc33753d536dd969fd357a014e9`\n- `Linux 3.8`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}