Description
A vulnerability was found in axboe fio up to 3.41. This affects the function str_buffer_pattern_cb of the file options.c. Performing manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been made public and could be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| axboe | fio | 3.0, 3.1, 3.2, 3.3, 3.4, 3.5, 3.6, 3.7, 3.8, 3.9, 3.10, 3.11, 3.12, 3.13, 3.14, 3.15, 3.16, 3.17, 3.18, 3.19, 3.20, 3.21, 3.22, 3.23, 3.24, 3.25, 3.26, 3.27, 3.28, 3.29, 3.30, 3.31, 3.32, 3.33, 3.34, 3.35, 3.36, 3.37, 3.38, 3.39, 3.40, 3.41 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | fio | No fix yet | — |
| Debian 13 | fio | No fix yet | — |
| Debian 12 | fio | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | fio | No fix yet | — |
| Ubuntu 26.04 LTS | fio | No fix yet | — |
| Ubuntu 25.10 | fio | No fix yet | — |
| Ubuntu 24.04 LTS | fio | No fix yet | — |
| Ubuntu 22.04 LTS | fio | No fix yet | — |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | fio | No fix yet | — |
| Ubuntu 18.04 LTS | fio | No fix yet | — |
| Ubuntu 16.04 LTS | fio | No fix yet | — |
| Ubuntu 14.04 LTS | fio | No fix yet | — |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | fio | 3.37-3 | — |
| Azure Linux 2 (CBL-Mariner) | fio | 3.30-3 | — |
References
- VDB-325180 | axboe fio options.c str_buffer_pattern_cb null pointer dereference vdb-entry technical-description
- VDB-325180 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #654069 | Jens Axboe Fio 3.41 / master commit 84787ad NULL Pointer Dereference third-party-advisory
- https://github.com/axboe/fio/issues/1982 issue-tracking
- https://github.com/user-attachments/files/22266964/poc.zip exploit