CVE-2026-30656
A NULL pointer dereference vulnerability exists in fio (Flexible I/O Tester) v3.41 when parsing...
A NULL pointer dereference vulnerability exists in fio (Flexible I/O Tester) v3.41 when parsing job files containing the fdp_pli option. The callback function str_fdp_pli_cb() does not validate the input pointer and calls strdup() on a NULL value when the option is specified without an argument. This results in a segmentation fault and process crash.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
A NULL pointer dereference vulnerability exists in fio (Flexible I/O Tester) v3.41 when parsing job files containing the fdp_pli option. The callback function str_fdp_pli_cb() does not validate the input pointer and calls strdup() on a NULL value when the option is specified without an argument. This results in a segmentation fault and process crash.
- Record
CVE-2026-30656- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-476
- Updated
- 2026-11-02
EUVDEUVD-2026-23245
A NULL pointer dereference vulnerability exists in fio (Flexible I/O Tester) v3.41 when parsing job files containing the fdp_pli option. The callback function str_fdp_pli_cb() does not validate the input pointer and calls strdup() on a NULL value when the option is specified without an argument. This results in a segmentation fault and process crash.
- Record
EUVD-2026-23245- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-hgfx-pj29-fw66
A NULL pointer dereference vulnerability exists in fio (Flexible I/O Tester) v3.41 when parsing...
A NULL pointer dereference vulnerability exists in fio (Flexible I/O Tester) v3.41 when parsing job files containing the fdp_pli option. The callback function str_fdp_pli_cb() does not validate the input pointer and calls strdup() on a NULL value when the option is specified without an argument. This results in a segmentation fault and process crash.
- Record
GHSA-hgfx-pj29-fw66- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-476
- Updated
- 2026-11-02
NVD
A NULL pointer dereference vulnerability exists in fio (Flexible I/O Tester) v3.41 when parsing job files containing the fdp_pli option. The callback function str_fdp_pli_cb() does not validate the input pointer and calls strdup() on a NULL value when the option is specified without an argument. This results in a segmentation fault and process crash.
- Record
CVE-2026-30656- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-476
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2026-30656
A NULL pointer dereference vulnerability exists in fio (Flexible I/O Tester) v3.41 when parsing job files containing the fdp_pli option. The callback function str_fdp_pli_cb() does not validate the input pointer and calls strdup() on a NULL value when the option is specified without an argument. This results in a segmentation fault and process crash.
- Record
DEBIAN-CVE-2026-30656- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2026-2095
fio security update
fio is a tool used to spawn many threads or processes that perform a specific type of io operation specified by the user.It accepts many global parameters inherited by threads.Its common method is to simulate jobs that match the specified io load.
Security Fix(es):
A NULL pointer dereference vulnerability exists in fio (Flexible I/O Tester) v3.41 when parsing job files containing the fdp_pli option. The callback function str_fdp_pli_cb() does not validate the input pointer and calls strdup() on a NULL value when the option is specified without an argument. This results in a segmentation fault and process crash.(CVE-2026-30656)
- Record
OESA-2026-2095- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 8 moreShow less
OSVOESA-2026-2096
fio security update
fio is a tool used to spawn many threads or processes that perform a specific type of io operation specified by the user.It accepts many global parameters inherited by threads.Its common method is to simulate jobs that match the specified io load.
Security Fix(es):
A NULL pointer dereference vulnerability exists in fio (Flexible I/O Tester) v3.41 when parsing job files containing the fdp_pli option. The callback function str_fdp_pli_cb() does not validate the input pointer and calls strdup() on a NULL value when the option is specified without an argument. This results in a segmentation fault and process crash.(CVE-2026-30656)
- Record
OESA-2026-2096- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2026-2097
fio security update
fio is a tool used to spawn many threads or processes that perform a specific type of io operation specified by the user.It accepts many global parameters inherited by threads.Its common method is to simulate jobs that match the specified io load.
Security Fix(es):
A NULL pointer dereference vulnerability exists in fio (Flexible I/O Tester) v3.41 when parsing job files containing the fdp_pli option. The callback function str_fdp_pli_cb() does not validate the input pointer and calls strdup() on a NULL value when the option is specified without an argument. This results in a segmentation fault and process crash.(CVE-2026-30656)
- Record
OESA-2026-2097- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2026-2098
fio security update
fio is a tool used to spawn many threads or processes that perform a specific type of io operation specified by the user.It accepts many global parameters inherited by threads.Its common method is to simulate jobs that match the specified io load.
Security Fix(es):
A NULL pointer dereference vulnerability exists in fio (Flexible I/O Tester) v3.41 when parsing job files containing the fdp_pli option. The callback function str_fdp_pli_cb() does not validate the input pointer and calls strdup() on a NULL value when the option is specified without an argument. This results in a segmentation fault and process crash.(CVE-2026-30656)
- Record
OESA-2026-2098- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2026-2099
fio security update
fio is a tool used to spawn many threads or processes that perform a specific type of io operation specified by the user.It accepts many global parameters inherited by threads.Its common method is to simulate jobs that match the specified io load.
Security Fix(es):
A NULL pointer dereference vulnerability exists in fio (Flexible I/O Tester) v3.41 when parsing job files containing the fdp_pli option. The callback function str_fdp_pli_cb() does not validate the input pointer and calls strdup() on a NULL value when the option is specified without an argument. This results in a segmentation fault and process crash.(CVE-2026-30656)
- Record
OESA-2026-2099- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-30656
A NULL pointer dereference vulnerability exists in fio (Flexible I/O Tester) v3.41 when parsing job files containing the fdp_pli option. The callback function str_fdp_pli_cb() does not validate the input pointer and calls strdup() on a NULL value when the option is specified without an argument. This results in a segmentation fault and process crash.
- Record
UBUNTU-CVE-2026-30656- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVAZL-85530 No score
CVE-2026-30656 affecting package fio for versions less than 3.37-4
A NULL pointer dereference vulnerability exists in fio (Flexible I/O Tester) v3.41 when parsing job files containing the fdp_pli option. The callback function str_fdp_pli_cb() does not validate the input pointer and calls strdup() on a NULL value when the option is specified without an argument. This results in a segmentation fault and process crash.
- Record
AZL-85530- Updated
- 2026-11-05
OSVMGASA-2026-0564 No score
Updated fio package fixes a security vulnerability
A NULL pointer dereference vulnerability exists in fio (Flexible I/O Tester) v3.41 when parsing job files containing the fdp_pli option. The callback function str_fdp_pli_cb() does not validate the input pointer and calls strdup() on a NULL value when the option is specified without an argument. This results in a segmentation fault and process crash. (CVE-2026-30656)
- Record
MGASA-2026-0564- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:11958-1 No score
fio-3.43-1.1 on GA media
These are all security issues fixed in the fio-3.43-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:11958-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
fioAzure Linux:3 |
before 3.37-4 | 3.37-4 |
fioDebian:12 |
All versions, plus listed versions 3.33-33.35-13.35-23.35-33.35-4 Show 6 moreShow less3.36-13.37-13.38-13.39-13.41-13.41-2 |
None known |
fioDebian:13 |
All versions, plus listed versions 3.39-13.41-13.41-2 |
None known |
fioDebian:14 |
All versions, plus listed versions 3.39-13.41-13.41-2 |
None known |
fioMageia:10 |
before 3.41-4.2.mga10 | 3.41-4.2.mga10 |
fioopenEuler:22.03-LTS-SP4 |
before 3.29-6.oe2203sp4 | 3.29-6.oe2203sp4 |
fioopenEuler:24.03-LTS |
before 3.34-6.oe2403 | 3.34-6.oe2403 |
fioopenEuler:24.03-LTS-SP1 |
before 3.34-6.oe2403sp1 | 3.34-6.oe2403sp1 |
fioopenEuler:24.03-LTS-SP3 |
before 3.34-6.oe2403sp3 | 3.34-6.oe2403sp3 |
fioopenEuler:20.03-LTS-SP4 |
before 3.7-10.oe2003sp4 | 3.7-10.oe2003sp4 |
Show 10 moreShow less
| Package | Affected | Fixed |
|---|---|---|
fioUbuntu:14.04:LTS |
All versions, plus listed versions 2.0.8-22.1.3-1 |
None known |
fioUbuntu:16.04:LTS |
All versions, plus listed versions 2.1.11-22.2.10-12.2.10-1ubuntu1 |
None known |
fioUbuntu:18.04:LTS |
All versions, plus listed versions 2.16-13.1-1 |
None known |
fioUbuntu:20.04:LTS |
All versions, plus listed versions 3.12-23.16-1 |
None known |
fioUbuntu:22.04:LTS |
All versions, plus listed versions 3.25-23.28-1 |
None known |
fioUbuntu:24.04:LTS |
All versions, plus listed versions 3.35-23.36-13.36-1build13.36-1build23.36-1ubuntu0.1 |
None known |
fioUbuntu:25.10 |
All versions, plus listed versions 3.38-13.39-1 |
None known |
fioUbuntu:26.10 |
All versions, plus listed versions 3.41-2 |
None known |
fioUbuntu:26.04:LTS |
All versions, plus listed versions 3.39-13.41-2 |
None known |
fioopenSUSE:Tumbleweed |
before 3.43-1.1 | 3.43-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-30656 is a high vulnerability (CVSS 7.5) in fio, published April 16, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.28%, the 20th percentile. Fixed in fio 3.37-4.
References
github.com/axboe/fio/issues/2055
gist.github.com/Criticayon/eb5e69163bfa4ce684e62ed5c939b76e
nvd.nist.gov/vuln/detail/CVE-2026-30656
security-tracker.debian.org/tracker/CVE-2026-30656
advisories.mageia.org/MGASA-2026-0564.html
Show 11 moreShow less
bugs.mageia.org/show_bug.cgi?id=36480
lists.opensuse.org/archives/list/[email protected]/message/GV237ENVXHS5VMJOZ2CB5ESWMM43O5X6
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2026-2095
ubuntu.com/security/CVE-2026-30656
cve.org/CVERecord?id=CVE-2026-30656
suse.com/security/cve/CVE-2026-30656