CVE-2025-10823

EUVD-2025-30438
A vulnerability was found in axboe fio up to 3.41. This affects the function str_buffer_pattern_cb of the file options.c. Performing manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been made public and could be used.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
3.3 LOW
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 3%
Azure Linux logo
Azure Linux Releases
Azure Package
Release
fio
Azure Linux 3.0
0:3.37-3.azl3
fixed
CBL-Mariner 2.0
0:3.30-3.cm2
fixed
Common Weakness Enumeration
References
https://github.com/axboe/fio/issues/1982
https://github.com/user-attachments/files/22266964/poc.zip
https://vuldb.com/?ctiid.325180
https://vuldb.com/?id.325180
https://vuldb.com/?submit.654069