CVE-2026-2100: Access of Uninitialized Pointer in p11-glue p11-kit
A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber or IBM btc derive mechanism parameters set to NULL. This could lead to the RPC-client attempting to return an uninitialized value, potentially resulting in a NULL dereference or undefined behavior. This issue may cause an application level denial of service or other unpredictable system states.
AI Analysis
Technical Summary
The vulnerability in p11-kit arises from the C_DeriveKey function attempting to return an uninitialized value when called with specific NULL parameters for IBM kyber or IBM btc derive mechanisms. This can cause a NULL pointer dereference or undefined behavior in the RPC client, potentially resulting in denial of service or other unstable system conditions. The flaw affects p11-kit versions >=9.0 <9.9 and >=10.0 <10.3. Red Hat has issued security advisories and updates for Red Hat Enterprise Linux 9 and 10 to fix this issue by releasing patched versions of p11-kit.
Potential Impact
Exploitation of this vulnerability can cause an application-level denial of service due to NULL pointer dereference or undefined behavior. There is no impact on confidentiality or integrity reported. The CVSS v3.1 base score is 5.3 (medium severity), reflecting network attack vector, low complexity, no privileges required, no user interaction, and impact limited to availability.
Mitigation Recommendations
Official security updates are available from Red Hat for affected versions of p11-kit in Red Hat Enterprise Linux 9 and 10. Users should apply the provided patches as described in the Red Hat advisories RHSA-2026:18143 and RHSA-2026:18599. Refer to https://access.redhat.com/articles/11258 for update instructions. No additional mitigation is indicated by the vendor advisory.
CVE-2026-2100: Access of Uninitialized Pointer in p11-glue p11-kit
Description
A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber or IBM btc derive mechanism parameters set to NULL. This could lead to the RPC-client attempting to return an uninitialized value, potentially resulting in a NULL dereference or undefined behavior. This issue may cause an application level denial of service or other unpredictable system states.
CVSS v3.1
Score 5.3medium
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in p11-kit arises from the C_DeriveKey function attempting to return an uninitialized value when called with specific NULL parameters for IBM kyber or IBM btc derive mechanisms. This can cause a NULL pointer dereference or undefined behavior in the RPC client, potentially resulting in denial of service or other unstable system conditions. The flaw affects p11-kit versions >=9.0 <9.9 and >=10.0 <10.3. Red Hat has issued security advisories and updates for Red Hat Enterprise Linux 9 and 10 to fix this issue by releasing patched versions of p11-kit.
Potential Impact
Exploitation of this vulnerability can cause an application-level denial of service due to NULL pointer dereference or undefined behavior. There is no impact on confidentiality or integrity reported. The CVSS v3.1 base score is 5.3 (medium severity), reflecting network attack vector, low complexity, no privileges required, no user interaction, and impact limited to availability.
Mitigation Recommendations
Official security updates are available from Red Hat for affected versions of p11-kit in Red Hat Enterprise Linux 9 and 10. Users should apply the provided patches as described in the Red Hat advisories RHSA-2026:18143 and RHSA-2026:18599. Refer to https://access.redhat.com/articles/11258 for update instructions. No additional mitigation is indicated by the vendor advisory.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- redhat
- Date Reserved
- 2026-02-06T12:05:50.501Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/errata/RHSA-2026:7065","vendor":"Red Hat"},{"url":"https://access.redhat.com/security/cve/CVE-2026-2100","vendor":"Red Hat"}]
Threat ID: 69c59e483c064ed76fcd54a3
Added to database: 03/26/2026, 20:59:52 UTC
Last enriched: 07/30/2026, 01:56:51 UTC
Last updated: 07/31/2026, 21:26:48 UTC
Views: 174
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.