From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-alma10-1.taild15c8.ts.net [100.103.45.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 4BFE63E833B for ; Wed, 27 May 2026 12:21:59 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=100.103.45.18 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1779884520; cv=none; b=lEQuYalgVMGw4j4/a2ytvAW2zK+yjus6ESLX8B/hs5renuvJ7iWXuiTp0J7l6+0yQrM16JRNEb3jjCVmCEqNAEtC6Zk8wUb5z0jPayJklv6m+gdE7zrYqBYPMcR/TulGfZNVZQ4tsZ+yrBACb8iztBFDzy6ki1qIExwQJn8aSy8= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1779884520; c=relaxed/simple; bh=pXHSLaTFzvf5zuTjTvfWdo0kAlFZ7VXElw8F3Jiiero=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=oIpmV0n+FjU2tlEtSFt6B0UrqI9MIqrfr5pmYLjnCiH8wGDI+8PSfGPsAR772/ovyPbOl7ATEik7FTpBQUTDHSLQ1GHO9uwbSmVMEAGnHyaw0wHsiWZaCMtgDl5JJzAZzoX4YiAhmmHyETptx6c9WE2TV7sUwe3bOYVOIgMHr20= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=zEwboRkO; arc=none smtp.client-ip=100.103.45.18 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="zEwboRkO" Received: by smtp.kernel.org (Postfix) with ESMTPSA id A4AFA1F000E9; Wed, 27 May 2026 12:21:58 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linuxfoundation.org; s=korg; t=1779884519; bh=WNVZl6f/ZdbOT+rKAA5StoEXY/o2i9VxKHmR4mA9CKk=; h=From:To:Cc:Subject:Date:Reply-To; b=zEwboRkON12h8pjSMZQVtYf30KG85S7cPzL2ajIg8mZhpYbXE12MC0AaSrHKSgggY Pdv/EQFpUwoOyP+ByZ5C9r4UnLPMgbJTs+GW4hnx5F7xjKm9mpTssVwdXViayss+gq lBRWN5WOS1EAtHS171xAEVqfHvvLKj5orptp9wHg= From: Greg Kroah-Hartman To: linux-cve-announce@vger.kernel.org Cc: Greg Kroah-Hartman Subject: CVE-2026-45857: scsi: csiostor: Fix dereference of null pointer rn Date: Wed, 27 May 2026 14:18:19 +0200 Message-ID: <2026052709-CVE-2026-45857-0a4f@gregkh> X-Mailer: git-send-email 2.54.0 Reply-To: , Precedence: bulk X-Mailing-List: linux-cve-announce@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 X-Developer-Signature: v=1; a=openpgp-sha256; l=3352; i=gregkh@linuxfoundation.org; h=from:subject:message-id; bh=GEwpYdaVGbu3hwriAfHEYzKIVRgFoc+q1yLueV0LDh8=; b=owGbwMvMwCRo6H6F97bub03G02pJDFliD5nszk66s2fiB+Wg87Kn1LeaxU2sMTvxO6LW1se5Y fJLI8dfHbEsDIJMDLJiiixftvEc3V9xSNHL0PY0zBxWJpAhDFycAjCRBScZFpx4ryy5xV56qwbr 1WMCD65ZqCtpnmaYH1RU+Ls7rVXO8Z2H/9a53de/LG5pBQA= X-Developer-Key: i=gregkh@linuxfoundation.org; a=openpgp; fpr=F4B60CC5BF78C2214A313DCB3147D40DDB2DFB29 Content-Transfer-Encoding: 8bit From: Greg Kroah-Hartman Description =========== In the Linux kernel, the following vulnerability has been resolved: scsi: csiostor: Fix dereference of null pointer rn The error exit path when rn is NULL ends up deferencing the null pointer rn via the use of the macro CSIO_INC_STATS. Fix this by adding a new error return path label after the use of the macro to avoid the deference. The Linux kernel CVE team has assigned CVE-2026-45857 to this issue. Affected and fixed versions =========================== Issue introduced in 3.8 with commit a3667aaed5698b84bad2f1b3f71adc86499f4bc6 and fixed in 5.10.252 with commit 16ccbfddcb32365138c806cf572e69b42a193c5c Issue introduced in 3.8 with commit a3667aaed5698b84bad2f1b3f71adc86499f4bc6 and fixed in 5.15.202 with commit 44ef9f81392de885883f73b9f5c43936a82ae9d7 Issue introduced in 3.8 with commit a3667aaed5698b84bad2f1b3f71adc86499f4bc6 and fixed in 6.1.165 with commit 526ea3c0ccd495b0079db3e28fdddd51c1bf01f7 Issue introduced in 3.8 with commit a3667aaed5698b84bad2f1b3f71adc86499f4bc6 and fixed in 6.6.128 with commit 25d623f0d77c11a256a54e860d00c239aa9a2583 Issue introduced in 3.8 with commit a3667aaed5698b84bad2f1b3f71adc86499f4bc6 and fixed in 6.12.75 with commit 6037124dbf675fbd0a6248aaf04cf07387b8c323 Issue introduced in 3.8 with commit a3667aaed5698b84bad2f1b3f71adc86499f4bc6 and fixed in 6.18.14 with commit 25ab5e97d3c5f3ed594b4a65d1cc99dc24756681 Issue introduced in 3.8 with commit a3667aaed5698b84bad2f1b3f71adc86499f4bc6 and fixed in 6.19.4 with commit 3bbbab7b6949c76df64210348adbefedaabbf549 Issue introduced in 3.8 with commit a3667aaed5698b84bad2f1b3f71adc86499f4bc6 and fixed in 7.0 with commit 1982257570b84dc33753d536dd969fd357a014e9 Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2026-45857 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: drivers/scsi/csiostor/csio_scsi.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/16ccbfddcb32365138c806cf572e69b42a193c5c https://git.kernel.org/stable/c/44ef9f81392de885883f73b9f5c43936a82ae9d7 https://git.kernel.org/stable/c/526ea3c0ccd495b0079db3e28fdddd51c1bf01f7 https://git.kernel.org/stable/c/25d623f0d77c11a256a54e860d00c239aa9a2583 https://git.kernel.org/stable/c/6037124dbf675fbd0a6248aaf04cf07387b8c323 https://git.kernel.org/stable/c/25ab5e97d3c5f3ed594b4a65d1cc99dc24756681 https://git.kernel.org/stable/c/3bbbab7b6949c76df64210348adbefedaabbf549 https://git.kernel.org/stable/c/1982257570b84dc33753d536dd969fd357a014e9