A NULL pointer dereference occurs in the Linux kernel’s csiostor SCSI driver: when the variable rn is null, the CSIO_INC_STATS macro attempts to access it, causing a kernel fault. The fault results in a kernel panic, which brings the system to a halt. This flaw is a classic NULL pointer dereference (CWE‑476).

All Linux kernel releases that include the legacy csiostor module and have not yet incorporated the patch that adds the error return path for rn. The vulnerability affects any system that uses SCSI devices, as the csiostor code is part of the core kernel modules for SCSI storage.

The CVSS score is not available in this dataset, and no EPSS value is provided; however the affected component is a critical kernel module. The likely attack vector is inferred to be local or intermediate, as malicious SCSI commands can be issued from user space or by a remote client capable of delivering SCSI commands (e.g., over a networked storage interface). The KEV catalog does not list this vulnerability. Given the severity of a kernel panic and the ability of an attacker to trigger it through SCSI commands, exploitation is plausible with moderate skill and would result in complete denial of service.