Low
fio — security advisory
A vulnerability was determined in axboe fio up to 3.41. This impacts the function __parse_jobs_ini of the file init.c. Executing manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized.
- Products
- fio
- Affected versions
- 3.33-3, 3.35-1, 3.35-2, 3.35-3, 3.35-4, 3.36-1, 3.37-1, 3.38-1, 3.39-1, 3.41-1, 3.41-2
- Fixed versions
- Not specified
- CVEs
- CVE-2025-10824
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 30 Oct 2026, 06:31 UTC · Revision 1
Source evidence
A vulnerability was determined in axboe fio up to 3.41. This impacts the function __parse_jobs_ini of the file init.c. Executing manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized.
osv:DEBIAN-CVE-2025-10824
fio
Fixed versions: Not specified
fio
Fixed versions: Not specified
fio
Fixed versions: Not specified
Complete source record
{
"id": "aba660b6b59a6a61ea8eb9e270b49336cf1d90ed36f0e887ee7e831eda95850f",
"url": "https://osv.dev/vulnerability/DEBIAN-CVE-2025-10824",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "DEBIAN-CVE-2025-10824",
"summary": "A vulnerability was determined in axboe fio up to 3.41. This impacts the function __parse_jobs_ini of the file init.c. Executing manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized.",
"evidence": "osv:DEBIAN-CVE-2025-10824",
"products": [
{
"name": {
"value": "fio",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "3.33-3",
"evidence": "/affected/0/versions"
},
{
"value": "3.35-1",
"evidence": "/affected/0/versions"
},
{
"value": "3.35-2",
"evidence": "/affected/0/versions"
},
{
"value": "3.35-3",
"evidence": "/affected/0/versions"
},
{
"value": "3.35-4",
"evidence": "/affected/0/versions"
},
{
"value": "3.36-1",
"evidence": "/affected/0/versions"
},
{
"value": "3.37-1",
"evidence": "/affected/0/versions"
},
{
"value": "3.38-1",
"evidence": "/affected/0/versions"
},
{
"value": "3.39-1",
"evidence": "/affected/0/versions"
},
{
"value": "3.41-1",
"evidence": "/affected/0/versions"
},
{
"value": "3.41-2",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "fio",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "3.39-1",
"evidence": "/affected/1/versions"
},
{
"value": "3.41-1",
"evidence": "/affected/1/versions"
},
{
"value": "3.41-2",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "fio",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "3.39-1",
"evidence": "/affected/2/versions"
},
{
"value": "3.41-1",
"evidence": "/affected/2/versions"
},
{
"value": "3.41-2",
"evidence": "/affected/2/versions"
}
]
}
],
"severity": "low",
"structured": {
"id": "DEBIAN-CVE-2025-10824",
"aliases": [
"DEBIAN-CVE-2025-10824"
],
"metrics": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "fio",
"purl": "pkg:deb/debian/fio?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"versions": [
"3.33-3",
"3.35-1",
"3.35-2",
"3.35-3",
"3.35-4",
"3.36-1",
"3.37-1",
"3.38-1",
"3.39-1",
"3.41-1",
"3.41-2"
],
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-10824.json"
},
"ecosystem_specific": {
"urgency": "unimportant"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "fio",
"purl": "pkg:deb/debian/fio?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"versions": [
"3.39-1",
"3.41-1",
"3.41-2"
],
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-10824.json"
},
"ecosystem_specific": {
"urgency": "unimportant"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "fio",
"purl": "pkg:deb/debian/fio?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"versions": [
"3.39-1",
"3.41-1",
"3.41-2"
],
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-10824.json"
},
"ecosystem_specific": {
"urgency": "unimportant"
}
}
],
"modified": "2026-10-12T09:47:37.229102549Z",
"provider": "osv",
"upstream": [
"CVE-2025-10824"
],
"references": [
"https://security-tracker.debian.org/tracker/CVE-2025-10824"
]
},
"related_cves": [
{
"value": "CVE-2025-10824",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 299675,
"published_at": "2025-09-23T01:15:36.197+00:00"
}