A NULL pointer dereference vulnerability exists in fio (Flexible I/O Tester) v3.41 when parsing job files containing the fdp_pli option. The callback function str_fdp_pli_cb() does not validate the input pointer and calls strdup() on a NULL value when the option is specified without an argument. This results in a segmentation fault and process crash.
History

Thu, 16 Apr 2026 16:45:00 +0000

Type Values Removed Values Added
First Time appeared Axboe
Axboe fio
Vendors & Products Axboe
Axboe fio

Thu, 16 Apr 2026 15:15:00 +0000

Type Values Removed Values Added
Description A NULL pointer dereference vulnerability exists in fio (Flexible I/O Tester) v3.41 when parsing job files containing the fdp_pli option. The callback function str_fdp_pli_cb() does not validate the input pointer and calls strdup() on a NULL value when the option is specified without an argument. This results in a segmentation fault and process crash.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-04-16T14:37:47.032Z

Reserved: 2026-03-04T00:00:00.000Z

Link: CVE-2026-30656

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-04-16T15:17:17.873

Modified: 2026-04-16T15:17:17.873

Link: CVE-2026-30656

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-04-16T16:30:15Z