---
id: CVE-2026-45857
title: 'scsi: csiostor: Fix dereference of null pointer rn'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  scsi: csiostor: Fix dereference of null pointer rn

  The error exit path when rn is NULL ends up deferencing the null pointer rn
  via the use of the macro CSIO_INC_STATS.…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= a3667aaed5698b84bad2f1b3f71adc86499f4bc6 <
    16ccbfddcb32365138c806cf572e69b42a193c5c
  - >-
    Linux >= a3667aaed5698b84bad2f1b3f71adc86499f4bc6 <
    44ef9f81392de885883f73b9f5c43936a82ae9d7
  - >-
    Linux >= a3667aaed5698b84bad2f1b3f71adc86499f4bc6 <
    526ea3c0ccd495b0079db3e28fdddd51c1bf01f7
  - >-
    Linux >= a3667aaed5698b84bad2f1b3f71adc86499f4bc6 <
    25d623f0d77c11a256a54e860d00c239aa9a2583
  - >-
    Linux >= a3667aaed5698b84bad2f1b3f71adc86499f4bc6 <
    6037124dbf675fbd0a6248aaf04cf07387b8c323
  - >-
    Linux >= a3667aaed5698b84bad2f1b3f71adc86499f4bc6 <
    25ab5e97d3c5f3ed594b4a65d1cc99dc24756681
  - >-
    Linux >= a3667aaed5698b84bad2f1b3f71adc86499f4bc6 <
    3bbbab7b6949c76df64210348adbefedaabbf549
  - >-
    Linux >= a3667aaed5698b84bad2f1b3f71adc86499f4bc6 <
    1982257570b84dc33753d536dd969fd357a014e9
  - Linux 3.8
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T15:42:50.516306Z'
published: '2026-05-27'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T15:53:09.648Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-45857'
references:
  - url: 'https://git.kernel.org/stable/c/16ccbfddcb32365138c806cf572e69b42a193c5c'
  - url: 'https://git.kernel.org/stable/c/44ef9f81392de885883f73b9f5c43936a82ae9d7'
  - url: 'https://git.kernel.org/stable/c/526ea3c0ccd495b0079db3e28fdddd51c1bf01f7'
  - url: 'https://git.kernel.org/stable/c/25d623f0d77c11a256a54e860d00c239aa9a2583'
  - url: 'https://git.kernel.org/stable/c/6037124dbf675fbd0a6248aaf04cf07387b8c323'
  - url: 'https://git.kernel.org/stable/c/25ab5e97d3c5f3ed594b4a65d1cc99dc24756681'
  - url: 'https://git.kernel.org/stable/c/3bbbab7b6949c76df64210348adbefedaabbf549'
  - url: 'https://git.kernel.org/stable/c/1982257570b84dc33753d536dd969fd357a014e9'
tags:
  - cve.org
epss: 0.0016
epssPercentile: 0.05256
ingestedAt: '2026-11-06T16:57:43.395Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

scsi: csiostor: Fix dereference of null pointer rn

The error exit path when rn is NULL ends up deferencing the null pointer rn
via the use of the macro CSIO_INC_STATS. Fix this by adding a new error
return path label after the use of the macro to avoid the deference.

## Affected

- `Linux >= a3667aaed5698b84bad2f1b3f71adc86499f4bc6 < 16ccbfddcb32365138c806cf572e69b42a193c5c`
- `Linux >= a3667aaed5698b84bad2f1b3f71adc86499f4bc6 < 44ef9f81392de885883f73b9f5c43936a82ae9d7`
- `Linux >= a3667aaed5698b84bad2f1b3f71adc86499f4bc6 < 526ea3c0ccd495b0079db3e28fdddd51c1bf01f7`
- `Linux >= a3667aaed5698b84bad2f1b3f71adc86499f4bc6 < 25d623f0d77c11a256a54e860d00c239aa9a2583`
- `Linux >= a3667aaed5698b84bad2f1b3f71adc86499f4bc6 < 6037124dbf675fbd0a6248aaf04cf07387b8c323`
- `Linux >= a3667aaed5698b84bad2f1b3f71adc86499f4bc6 < 25ab5e97d3c5f3ed594b4a65d1cc99dc24756681`
- `Linux >= a3667aaed5698b84bad2f1b3f71adc86499f4bc6 < 3bbbab7b6949c76df64210348adbefedaabbf549`
- `Linux >= a3667aaed5698b84bad2f1b3f71adc86499f4bc6 < 1982257570b84dc33753d536dd969fd357a014e9`
- `Linux 3.8`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.