CVE-2026-2100: Access of Uninitialized Pointer in p11-glue p11-kit
A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber or IBM btc derive mechanism parameters set to NULL. This could lead to the RPC-client attempting to return an uninitialized value, potentially resulting in a NULL dereference or undefined behavior. This issue may cause an application level denial of service or other unpredictable system states.
AI Analysis
Technical Summary
The vulnerability in p11-kit involves the C_DeriveKey function, which when called with specific IBM kyber or IBM btc derive mechanism parameters set to NULL, causes the RPC-client to attempt to return an uninitialized value. This can result in a NULL pointer dereference or undefined behavior, potentially causing denial of service or other unpredictable application states. The flaw affects p11-kit versions >=9.0 <9.9 and >=10.0 <10.3. Red Hat has released security updates to fix this issue in their Enterprise Linux 9 and 10 distributions.
Potential Impact
Exploitation of this vulnerability can cause an application-level denial of service due to NULL pointer dereference or undefined behavior. There is no impact on confidentiality or integrity reported. No known exploits in the wild have been reported.
Mitigation Recommendations
Red Hat has issued official security advisories and updates that fix this vulnerability. Users should apply the provided security updates for Red Hat Enterprise Linux 9 and 10 as detailed in the Red Hat advisories (RHSA-2026:18143 and RHSA-2026:18599). Patch status is confirmed with official fixes available. No additional mitigation steps are required beyond applying these updates.
CVE-2026-2100: Access of Uninitialized Pointer in p11-glue p11-kit
Description
A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber or IBM btc derive mechanism parameters set to NULL. This could lead to the RPC-client attempting to return an uninitialized value, potentially resulting in a NULL dereference or undefined behavior. This issue may cause an application level denial of service or other unpredictable system states.
CVSS v3.1
Score 5.3medium
Affected software
p11-glue
p11-kit
Red Hat
Red Hat Enterprise Linux 10
Red Hat
Red Hat Enterprise Linux 9
Red Hat
Cost Management 4
Red Hat
Red Hat Hardened Images
Red Hat
Red Hat Insights proxy 1.5
Red Hat
Red Hat Update Infrastructure 5
Red Hat
Red Hat Update Infrastructure 5
Red Hat
Red Hat Update Infrastructure 5
Red Hat
Red Hat Update Infrastructure 5
Red Hat
Red Hat Update Infrastructure 5
Red Hat
Red Hat Update Infrastructure 5
Red Hat
Red Hat Update Infrastructure 5
Red Hat
Red Hat Enterprise Linux 6
Red Hat
Red Hat Enterprise Linux 7
Red Hat
Red Hat Enterprise Linux 8
Red Hat
Red Hat OpenShift Container Platform 4
Red Hat
Red Hat OpenShift Container Platform 4
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in p11-kit involves the C_DeriveKey function, which when called with specific IBM kyber or IBM btc derive mechanism parameters set to NULL, causes the RPC-client to attempt to return an uninitialized value. This can result in a NULL pointer dereference or undefined behavior, potentially causing denial of service or other unpredictable application states. The flaw affects p11-kit versions >=9.0 <9.9 and >=10.0 <10.3. Red Hat has released security updates to fix this issue in their Enterprise Linux 9 and 10 distributions.
Potential Impact
Exploitation of this vulnerability can cause an application-level denial of service due to NULL pointer dereference or undefined behavior. There is no impact on confidentiality or integrity reported. No known exploits in the wild have been reported.
Mitigation Recommendations
Red Hat has issued official security advisories and updates that fix this vulnerability. Users should apply the provided security updates for Red Hat Enterprise Linux 9 and 10 as detailed in the Red Hat advisories (RHSA-2026:18143 and RHSA-2026:18599). Patch status is confirmed with official fixes available. No additional mitigation steps are required beyond applying these updates.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- redhat
- Date Reserved
- 2026-02-06T12:05:50.501Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/errata/RHSA-2026:7065","vendor":"Red Hat"},{"url":"https://access.redhat.com/security/cve/CVE-2026-2100","vendor":"Red Hat"}]
Threat ID: 69c59e483c064ed76fcd54a3
Added to database: 03/26/2026, 20:59:52 UTC
Last enriched: 08/13/2026, 16:42:09 UTC
Last updated: 09/11/2026, 22:23:31 UTC
Views: 216
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.