The Linux kernel's SCSI csiostor driver contained a vulnerability where the error exit path dereferenced a null pointer 'rn'. Specifically, after invoking the CSIO_INC_STATS macro, the code did not properly handle the case when 'rn' was NULL, leading to a null pointer dereference. The fix involved adding a new error return path label to avoid dereferencing the null pointer, thereby preventing kernel crashes caused by this condition.

This vulnerability can cause a denial of service (kernel crash) due to null pointer dereference. There is no impact on confidentiality or integrity. The CVSS vector indicates local attack vector with low complexity and low privileges required, no user interaction, unchanged scope, and no confidentiality or integrity impact but high impact on availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch links are provided in the data. Users should monitor vendor communications for updates and apply fixes once available.