5.5

CVE-2026-45857: linux NULL Pointer Dereference

CVSS: 5.5v3.1MediumAnalyzed
AliasesUBUNTU-CVE-2026-45857DEBIAN-CVE-2026-45857
Published 27-05-2026Last modified 27-05-2026
Open JSON

Vulnerability summary

CVE-2026-45857 is a medium (CVSS 5.5) NULL Pointer Dereference vulnerability in linux. EPSS estimates a 0.16% chance of exploitation in the next 30 days, higher than 5.1% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.16%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 37 · Related 37
OPENSUSE-SU-2026:21388-1SUSE-SU-2026:22742-1SUSE-SU-2026:22769-1SUSE-SU-2026:22809-1SUSE-SU-2026:22810-1SUSE-SU-2026:22812-1

Timeline

  1. 27-05-2026
    PublishedVulnerability first disclosed.

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: csiostor: Fix dereference of null pointer rn The error exit path when rn is NULL ends up deferencing the null pointer rn via the use of the macro CSIO_INC_STATS. Fix this by adding a new error return path label after the use of the macro to avoid the deference.

CVSS metrics

4 scores · 3 sources · 2 versions

EPSS trend

Probability

0.16%

Chance of exploitation in the next 30 days

Percentile

5%

Versus all other CVEs

30-day change

0.00 pp

From 0.16% on 21-09-2026

21-09-202621-10-2026
EPSS score
0.16%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu157 products
  • linuxAll versions (No fix recorded) | < 5.15.0-186.196 | < 6.8.0-134.134
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.15.0-1112.119 | < 6.8.0-1060.63
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ a3667aaed5698b84bad2f1b3f71adc86499f4bc6, < 16ccbfddcb32365138c806cf572e69b42a193c5c | ≥ a3667aaed5698b84bad2f1b3f71adc86499f4bc6, < 44ef9f81392de885883f73b9f5c43936a82ae9d7 | ≥ a3667aaed5698b84bad2f1b3f71adc86499f4bc6, < 526ea3c0ccd495b0079db3e28fdddd51c1bf01f7 | ≥ a3667aaed5698b84bad2f1b3f71adc86499f4bc6, < 25d623f0d77c11a256a54e860d00c239aa9a2583 | ≥ a3667aaed5698b84bad2f1b3f71adc86499f4bc6, < 6037124dbf675fbd0a6248aaf04cf07387b8c323 | ≥ a3667aaed5698b84bad2f1b3f71adc86499f4bc6, < 25ab5e97d3c5f3ed594b4a65d1cc99dc24756681 | ≥ a3667aaed5698b84bad2f1b3f71adc86499f4bc6, < 3bbbab7b6949c76df64210348adbefedaabbf549 | ≥ a3667aaed5698b84bad2f1b3f71adc86499f4bc6, < 1982257570b84dc33753d536dd969fd357a014e9 | 3.8
  • linux_kernel≥ 3.8, < 5.10.252 | ≥ 5.11, < 5.15.202 | ≥ 5.16, < 6.1.165 | ≥ 6.2, < 6.6.128 | ≥ 6.7, < 6.12.75 | ≥ 6.13, < 6.18.14 | ≥ 6.19, < 6.19.4
Debian1 product
  • linux< 6.1.170-1 | < 6.12.85-1 | < 6.18.14-1

3 vendors · 160 products

References

37 links
Show all 37 references