GCVE-110-MAGEIA-2026-564

Advisory Published

Vulnetix · Advisory published October 28, 2026

A NULL pointer dereference vulnerability exists in fio (Flexible I/O Tester) v3.41 when parsing job files containing the fdp_pli option. The callback function str_fdp_pli_cb() does not validate the input pointer and calls strdup() on a NULL value when the option is specified without an argument. This results in a segmentation fault and process crash. (CVE-2026-30656)

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	fio	0 (affected), 3.41-4.2.mga10 (unaffected)	—

References

Updated fio package fixes a security vulnerability

advisory

Updated fio package fixes a security vulnerability

issue

Updated fio package fixes a security vulnerability

url

Browse GCVE Records

858 records in the GCVE database · Updated October 29, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON