CVE-2026-45857

A flaw was found in the Linux kernel's scsi: csiostor module. This null pointer dereference vulnerability occurs in an error handling path. A local attacker could exploit this to cause a system crash, leading to a Denial of Service (DoS).

This Moderate-impact null pointer dereference flaw in the Linux kernel's csiostor module could allow a local attacker to trigger a system crash, resulting in a denial of service. The vulnerability specifically affects the error handling path of the csiostor driver, which is primarily used with Chelsio Communications iSCSI adapters.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To prevent exploitation, the csiostor kernel module can be blacklisted. Create a file /etc/modprobe.d/blacklist-csiostor.conf with the line blacklist csiostor. A system reboot is necessary for this change to take effect. This mitigation may affect systems that rely on Chelsio T4/T5/T6 iSCSI/FCoE adapters.