AZL-85530

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-85530.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-85530

Upstream

CVE-2026-30656

Published

2026-04-16T15:17:17Z

Modified

2026-08-30T05:26:50Z

Summary

CVE-2026-30656 affecting package fio for versions less than 3.37-4

Details

A NULL pointer dereference vulnerability exists in fio (Flexible I/O Tester) v3.41 when parsing job files containing the fdppli option. The callback function strfdpplicb() does not validate the input pointer and calls strdup() on a NULL value when the option is specified without an argument. This results in a segmentation fault and process crash.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-30656

Affected packages

Azure Linux:3 / fio

Package

Name: fio
Purl: pkg:rpm/azure-linux/fio

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.37-4

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-85530.json"