Skip to main content

fio CVE-2026-30656

| EUVDEUVD-2026-23245 HIGH
NULL Pointer Dereference (CWE-476)
2026-04-16 cve@mitre.org GHSA-hgfx-pj29-fw66
Denial Of Service Null Pointer Dereference
7.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
vuln.today AI
3.3 LOW

Reached only via locally-supplied job-file input so AV:L/PR:L; impact is a single benchmarking-process crash that is trivially restarted, so A:L and C:N/I:N.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
SUSE
HIGH
qualitative
Red Hat
5.5 MEDIUM
qualitative

Primary rating from NVD.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

5
Analysis Generated
Jul 24, 2026 - 07:37 vuln.today
Patch released
Apr 19, 2026 - 02:30 nvd
Patch available
CVSS changed
Apr 16, 2026 - 18:22 NVD
7.5 (HIGH)
EUVD ID Assigned
Apr 16, 2026 - 15:22 euvd
EUVD-2026-23245
CVE Published
Apr 16, 2026 - 15:17 nvd
HIGH 7.5

DescriptionCVE.org

A NULL pointer dereference vulnerability exists in fio (Flexible I/O Tester) v3.41 when parsing job files containing the fdp_pli option. The callback function str_fdp_pli_cb() does not validate the input pointer and calls strdup() on a NULL value when the option is specified without an argument. This results in a segmentation fault and process crash.

AnalysisAI

Denial of service in fio (Flexible I/O Tester) v3.41 lets a crafted job file crash the process via a NULL pointer dereference: when the fdp_pli option is supplied without an argument, the str_fdp_pli_cb() callback passes a NULL pointer to strdup(), triggering a segmentation fault (CWE-476). Only availability is affected - no code execution or data exposure. It carries a low EPSS score (0.06%, 19th percentile), is not on CISA KEV, and has no public exploit identified at time of analysis, though a referenced gist and upstream GitHub issue #2055 document reproduction.

Technical ContextAI

fio is Linux's de-facto storage and I/O benchmarking utility, driving synthetic workloads defined in text-based job files or command-line options. The fdp_pli option relates to fio's Flexible Data Placement (FDP) support, which lets test workloads target specific NVMe placement identifiers. The bug is a classic CWE-476 NULL pointer dereference in option parsing: the string callback str_fdp_pli_cb() assumes it always receives a valid string and calls strdup() on the operand, but fio invokes the callback with NULL when the option key is present with no value. strdup(NULL) dereferences the pointer inside libc and the process dies. The EUVD entry does not enumerate CPEs (affected versions listed as 'n/a n/a'); the affected build is identified from the description as fio v3.41.

RemediationAI

Patch available per vendor advisory - upgrade fio to the fixed release published by the upstream maintainer (axboe/fio); track GitHub issue #2055 (https://github.com/axboe/fio/issues/2055) and your distribution's advisory (Red Hat and Suse are noted as tracking this) for the exact tagged version, which is not independently confirmed in the provided data, so do not assume a specific version number. Until patched, the practical compensating control is to avoid running fio against untrusted or externally-supplied job files and to validate that any fdp_pli option always includes an argument; in automation or CI harnesses that accept user-provided fio configs, sanitize or reject job files before execution. These controls have minimal trade-off since fio is a testing tool, not a persistent service - the main cost is added input validation in wrapper scripts.

Same weakness CWE-476 – NULL Pointer Dereference

View all
CVE-2016-0742 HIGH
7.5
CVE-2014-3470 MEDIUM
4.3
CVE-2017-3730 HIGH POC
7.5
CVE-2017-3169 CRITICAL POC
9.8
CVE-2016-4957 HIGH
7.5
CVE-2015-3194 HIGH
7.5
CVE-2026-21525 MEDIUM
6.2
CVE-2017-0016 MEDIUM
5.9

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Vendor StatusVendor

SUSE

Severity: High
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise High Performance Computing 15 SP7 Fixed
SUSE Linux Enterprise Module for Basesystem 15 SP7 Fixed
SUSE Linux Enterprise Server 15 SP7 Fixed
SUSE Linux Enterprise Server 16.0 Fixed

Share

CVE-2026-30656 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy