CVE-2025-10824: axboe fio init.c __parse_jobs_ini use after free

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-09-23 · updated 2026-10-11
Weakness: CWE-119

Description

A vulnerability was determined in axboe fio up to 3.41. This impacts the function __parse_jobs_ini of the file init.c. Executing manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized.

Affected products

axboe fio: 3.0, 3.1, 3.2, 3.3, 3.4, 3.5 (+36)

References

https://github.com/axboe/fio/issues/1981
https://github.com/user-attachments/files/22266756/poc.zip
https://vuldb.com/?ctiid.325181
https://vuldb.com/?id.325181
https://vuldb.com/?submit.654072

Get alerted when CVE-2025-10824 or the next vulnerability affects your stack