MGASA-2026-0564

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2026-0564.html
Import Source
https://advisories.mageia.org/MGASA-2026-0564.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2026-0564
Upstream
  • CVE-2026-30656
Published
2026-10-28T16:11:52Z
Modified
2026-10-28T16:15:34Z
Summary
Updated fio package fixes a security vulnerability
Details

A NULL pointer dereference vulnerability exists in fio (Flexible I/O Tester) v3.41 when parsing job files containing the fdp_pli option. The callback function str_fdp_pli_cb() does not validate the input pointer and calls strdup() on a NULL value when the option is specified without an argument. This results in a segmentation fault and process crash. (CVE-2026-30656)

References
Credits

Affected packages

Mageia:10 / fio

Package

Name
fio
Purl
pkg:rpm/mageia/fio?arch=source&distro=mageia-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.41-4.2.mga10

Ecosystem specific 

{
    "section":  "core"
}

Database specific

source 
"https://advisories.mageia.org/MGASA-2026-0564.json"