← volver
CVE-2025-10824

axboe fio init.c __parse_jobs_ini use after free

CVSS 4.8 MEDIUMEPSS 0.1%CWE-119CWE-416
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 4.8EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
23 sep 2025Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A vulnerability was determined in axboe fio up to 3.41. This impacts the function __parse_jobs_ini of the file init.c. Executing manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
axboe · fio

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
https://github.com/axboe/fio/issues/1981https://github.com/user-attachments/files/22266756/poc.ziphttps://vuldb.com/?ctiid.325181https://vuldb.com/?id.325181https://vuldb.com/?submit.654072