Low
axboe fio init.c __parse_jobs_ini use after free
Type: advisorySources: OSV
A vulnerability was determined in axboe fio up to 3.41. This impacts the function __parse_jobs_ini of the file init.c. Executing manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2025-10824
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 3 Nov 2026, 05:53 UTC · Revision 1
Source evidence
axboe fio init.c __parse_jobs_ini use after free
core-osv · Original sourcePublished 23 Sept 2025, 00:02 UTC
A vulnerability was determined in axboe fio up to 3.41. This impacts the function __parse_jobs_ini of the file init.c. Executing manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized.
osv:CVE-2025-10824
Complete source record
{
"id": "bfb5f395d23c4bc6afea7bf039d2e11de3b3d3029254ffec256635761de175e3",
"url": "https://osv.dev/vulnerability/CVE-2025-10824",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "axboe fio init.c __parse_jobs_ini use after free",
"summary": "A vulnerability was determined in axboe fio up to 3.41. This impacts the function __parse_jobs_ini of the file init.c. Executing manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized.",
"evidence": "osv:CVE-2025-10824",
"products": [],
"severity": "low",
"structured": {
"id": "CVE-2025-10824",
"aliases": [
"CVE-2025-10824"
],
"metrics": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/axboe/fio",
"type": "GIT",
"events": [
{
"introduced": "bdadbb83ba3611a09888600830b8539bf3d19794"
},
{
"last_affected": "ed675d3477a70a42d2e757b713f6c7125a27cdca"
}
],
"database_specific": {
"extracted_events": [
{
"range": [
{
"introduced": "3.0"
},
{
"last_affected": "3.0"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.1"
},
{
"last_affected": "3.1"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.2"
},
{
"last_affected": "3.2"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.3"
},
{
"last_affected": "3.3"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.4"
},
{
"last_affected": "3.4"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.5"
},
{
"last_affected": "3.5"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.6"
},
{
"last_affected": "3.6"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.7"
},
{
"last_affected": "3.7"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.8"
},
{
"last_affected": "3.8"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.9"
},
{
"last_affected": "3.9"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.10"
},
{
"last_affected": "3.10"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.11"
},
{
"last_affected": "3.11"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.12"
},
{
"last_affected": "3.12"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.13"
},
{
"last_affected": "3.13"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.14"
},
{
"last_affected": "3.14"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.15"
},
{
"last_affected": "3.15"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.16"
},
{
"last_affected": "3.16"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.17"
},
{
"last_affected": "3.17"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.18"
},
{
"last_affected": "3.18"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.19"
},
{
"last_affected": "3.19"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.20"
},
{
"last_affected": "3.20"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.21"
},
{
"last_affected": "3.21"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.22"
},
{
"last_affected": "3.22"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.23"
},
{
"last_affected": "3.23"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.24"
},
{
"last_affected": "3.24"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.25"
},
{
"last_affected": "3.25"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.26"
},
{
"last_affected": "3.26"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.27"
},
{
"last_affected": "3.27"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.28"
},
{
"last_affected": "3.28"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.29"
},
{
"last_affected": "3.29"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.30"
},
{
"last_affected": "3.30"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.31"
},
{
"last_affected": "3.31"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.32"
},
{
"last_affected": "3.32"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.33"
},
{
"last_affected": "3.33"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.34"
},
{
"last_affected": "3.34"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.35"
},
{
"last_affected": "3.35"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.36"
},
{
"last_affected": "3.36"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.37"
},
{
"last_affected": "3.37"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.38"
},
{
"last_affected": "3.38"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.39"
},
{
"last_affected": "3.39"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.40"
},
{
"last_affected": "3.40"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.41"
},
{
"last_affected": "3.41"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "0"
},
{
"last_affected": "3.41"
}
],
"source": "DESCRIPTION"
}
]
}
}
],
"versions": [
"3.0",
"3.1",
"3.10",
"3.11",
"3.12",
"3.13",
"3.14",
"3.15",
"3.16",
"3.17",
"3.18",
"3.19",
"3.2",
"3.20",
"3.21",
"3.22",
"3.23",
"3.24",
"3.25",
"3.26",
"3.27",
"3.28",
"3.29",
"3.3",
"3.30",
"3.31",
"3.32",
"3.33",
"3.34",
"3.35",
"3.36",
"3.37",
"3.38",
"3.39",
"3.4",
"3.40",
"3.41",
"3.5",
"3.6",
"3.7",
"3.8",
"3.9",
"fio-3.41",
"fio-3.40",
"fio-3.39",
"fio-3.38",
"fio-3.37",
"fio-3.36",
"fio-3.35",
"fio-3.34",
"fio-3.33",
"fio-3.32",
"fio-3.31",
"test-tag-2022-08-09-2",
"test-tag-2022-08-09",
"fio-3.30",
"fio-3.29",
"fio-3.16",
"fio-3.28",
"fio-3.27",
"fio-3.26",
"fio-3.25",
"fio-3.24",
"fio-3.23",
"fio-3.22",
"fio-3.21",
"fio-3.20",
"fio-3.19",
"fio-3.18",
"fio-3.17",
"fio-3.15",
"fio-3.14",
"fio-3.13",
"fio-3.12",
"fio-3.11",
"fio-3.10",
"fio-3.9",
"fio-3.8",
"fio-3.7",
"fio-3.6",
"fio-3.5",
"fio-3.4",
"fio-3.3",
"fio-3.2",
"fio-3.1",
"fio-3.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-10824.json"
}
}
],
"modified": "2026-10-28T02:30:26.473277341Z",
"provider": "osv",
"references": [
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/10xxx/CVE-2025-10824.json",
"https://nvd.nist.gov/vuln/detail/CVE-2025-10824",
"https://vuldb.com/?id.325181",
"https://vuldb.com/?submit.654072",
"https://github.com/axboe/fio/issues/1981",
"https://vuldb.com/?ctiid.325181",
"https://github.com/user-attachments/files/22266756/poc.zip"
],
"provider_metadata": {
"cwe_ids": [
"CWE-119",
"CWE-416"
],
"cna_assigner": "VulDB",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/10xxx/CVE-2025-10824.json"
}
},
"related_cves": [
{
"value": "CVE-2025-10824",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 492865,
"published_at": "2025-09-23T00:02:06.575+00:00"
}