← back
CVE-2025-10824

axboe fio init.c __parse_jobs_ini use after free

CVSS 4.8 MEDIUMEPSS 0.1%CWE-119CWE-416
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 4.8EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
23 Sep 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A vulnerability was determined in axboe fio up to 3.41. This impacts the function __parse_jobs_ini of the file init.c. Executing manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
axboe · fio

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://github.com/axboe/fio/issues/1981https://github.com/user-attachments/files/22266756/poc.ziphttps://vuldb.com/?ctiid.325181https://vuldb.com/?id.325181https://vuldb.com/?submit.654072