CVE-2026-30656

A NULL pointer dereference vulnerability exists in fio Flexible I/O Tester v3.41 when parsing job files containing the fdppli option. The callback function strfdpplicb does not validate the input pointer and calls strdup on a NULL value when the option is specified without an argument. This resul...

PT-2026-33324

Name of the Vulnerable Software and Affected Versions fio Flexible I/O Tester version 3.41 Description A NULL pointer dereference occurs when parsing job files containing the 'fdp pli' option. The callback function str fdp pli cb fails to validate the input pointer and calls strdup on a NULL valu...

CVE-2026-30656

A NULL pointer dereference vulnerability exists in fio Flexible I/O Tester v3.41 when parsing job files containing the fdppli option. The callback function strfdpplicb does not validate the input pointer and calls strdup on a NULL value when the option is specified without an argument. This resul...

fio 安全漏洞

Fio is a flexible I/O testing software developed by Jens Axboe as an individual project. Version 3.41 of Fio contains a security vulnerability. This vulnerability stems from a null pointer dereferencing during the parsing of job files that contain the fdppli option. It may lead to segmentation...

CVE-2026-30656

A NULL pointer dereference vulnerability exists in fio (Flexible I/O Tester) v3.41 when parsing job files that include the fdp_pli option. The vulnerability occurs because the callback function str_fdp_cli_cb() fails to validate the input pointer, leading to a call of strdup() on a NULL value whe...

CVE-2026-30656

A NULL pointer dereference vulnerability exists in fio Flexible I/O Tester v3.41 when parsing job files containing the fdppli option. The callback function strfdpplicb does not validate the input pointer and calls strdup on a NULL value when the option is specified without an argument. This resul...

PT-2026-35094

Summary fio json parse can enter an infinite loop when it encounters a nested JSON value starting with i or I. The process spins in user space and pegs one CPU core at 100% instead of returning a parse error. Because iodine vendors the same parser code, the issue also affects iodine when it parse...

CVE-2025-71161

In the Linux kernel, the following vulnerability has been resolved: dm-verity: disable recursive forward error correction There are two problems with the recursive correction: 1. It may cause denial-of-service. In fecreadbufs, there is a loop that has 253 iterations. For each iteration, we may ca...

fio:fuzz_parseini: Heap-use-after-free in load_ioengine

Project: https://github.com/axboe/fio.git Detailed Report: https://oss-fuzz.com/testcase?key=6573695041863680 Project: fio Fuzzing Engine: libFuzzer Fuzz Target: fuzzparseini Job Type: libfuzzerasanfio Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x78835cae0489 Crash...

CVE-2025-10823 affecting package fio for versions less than 3.37-3

CVE-2025-10823 affecting package fio for versions less than 3.37-3. A patched version of the package is available...

CVE-2025-10823 affecting package fio for versions less than 3.30-3

CVE-2025-10823 affecting package fio for versions less than 3.30-3. A patched version of the package is available...

TencentOS Server 4: fio (TSSA-2025:0751)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0751 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

EUVD-2025-30437

Malicious code in bioql PyPI...

EUVD-2025-30438

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2025-10823

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in axboe fio up to 3.41. This affects the function strbufferpatterncb of the file options.c. Performing manipulation results in null...

Linux Distros Unpatched Vulnerability : CVE-2025-10824

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was determined in axboe fio up to 3.41. This impacts the function parsejobsini of the file init.c. Executing manipulation can lead to use after...

CVE-2025-10823

A vulnerability was found in axboe fio up to 3.41. This affects the function strbufferpatterncb of the file options.c. Performing manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been made public and could be used...

CVE-2025-10824

A vulnerability was determined in axboe fio up to 3.41. This impacts the function parsejobsini of the file init.c. Executing manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized...

axboe fio init.c __parse_jobs_ini use after free

...

CVE-2025-10824

A vulnerability was determined in axboe fio up to 3.41. This impacts the function parsejobsini of the file init.c. Executing manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized...