Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
fio crashes if fdp_pli option is missing a value
published 6 months ago
Summary
The fio testing tool can stop working if a job file includes the fdp_pli setting without providing an argument. This causes the program to crash, which could interrupt testing and any automated processes that rely on it. Update fio to a version newer than 3.37-4 or remove the fdp_pli option from job files to prevent the crash.
What to do
- Update azure fio to version 3.37-4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | azure | fio |
< 3.37-4 Fix: upgrade to 3.37-4
|
Original advisory text
CVE-2026-30656 affecting package fio for versions less than 3.37-4
A NULL pointer dereference vulnerability exists in fio (Flexible I/O Tester) v3.41 when parsing job files containing the fdp_pli option. The callback function str_fdp_pli_cb() does not validate the input pointer and calls strdup() on a NULL value when the option is specified without an argument. This results in a segmentation fault and process crash.
References
Timeline
Published16 Apr 2026
Updated23 Sep 2026
First seen23 Sep 2026
Sources
AZL-85530 · OSV
Track software like this
Free during beta