{"id":"CVE-2026-2100","aliases":["ALPINE-CVE-2026-2100","ALSA-2026:18143","ALSA-2026:18599","BELL-CVE-2026-2100","DEBIAN-CVE-2026-2100","EUVD-2026-16336","GHSA-hq85-3f6c-jx84","RHSA-2026:18143","RHSA-2026:18599","RHSA-2026:7065","RLSA-2026:18143","RLSA-2026:18599","UBUNTU-CVE-2026-2100","openSUSE-SU-2026:10169-1"],"status":"published","title":"P11-kit: null dereference via c_derivekey with specific null parameters","description":"A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber or IBM btc derive mechanism parameters set to NULL. This could lead to the RPC-client attempting to return an uninitialized value, potentially resulting in a NULL dereference or undefined behavior. This issue may cause an application level denial of service or other unpredictable system states.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.01311,"percentile":0.71043,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-824"],"published":"2026-02-09T00:00:00Z","modified":"2026-11-05T19:23:57Z","fixes":[{"ecosystem":"Alpine:v3.21","package":"p11-kit","fixed_in":["0.26.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"p11-kit","fixed_in":["0.26.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"p11-kit","fixed_in":["0.26.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"p11-kit","fixed_in":["0.26.2-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"p11-kit","fixed_in":["0.26.2-1.el10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"p11-kit-client","fixed_in":["0.26.2-1.el10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"p11-kit-devel","fixed_in":["0.26.2-1.el10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"p11-kit-server","fixed_in":["0.26.2-1.el10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"p11-kit-trust","fixed_in":["0.26.2-1.el10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"p11-kit","fixed_in":["0.26.2-1.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"p11-kit-client","fixed_in":["0.26.2-1.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"p11-kit-devel","fixed_in":["0.26.2-1.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"p11-kit-server","fixed_in":["0.26.2-1.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"p11-kit-trust","fixed_in":["0.26.2-1.el9"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"p11-kit","fixed_in":["0.26.2-2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"p11-kit-client-debuginfo","fixed_in":["0:0.26.2-1.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"p11-kit-debuginfo","fixed_in":["0:0.26.2-1.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"p11-kit-debugsource","fixed_in":["0:0.26.2-1.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"p11-kit-devel","fixed_in":["0:0.26.2-1.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"p11-kit-server","fixed_in":["0:0.26.2-1.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"p11-kit-server-debuginfo","fixed_in":["0:0.26.2-1.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"p11-kit-trust-debuginfo","fixed_in":["0:0.26.2-1.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"p11-kit","fixed_in":["0:0.26.2-1.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"p11-kit-client","fixed_in":["0:0.26.2-1.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"p11-kit-trust","fixed_in":["0:0.26.2-1.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"p11-kit-client-debuginfo","fixed_in":["0:0.26.2-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"p11-kit-debuginfo","fixed_in":["0:0.26.2-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"p11-kit-debugsource","fixed_in":["0:0.26.2-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"p11-kit-devel","fixed_in":["0:0.26.2-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"p11-kit-server","fixed_in":["0:0.26.2-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"p11-kit-server-debuginfo","fixed_in":["0:0.26.2-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"p11-kit-trust-debuginfo","fixed_in":["0:0.26.2-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"p11-kit","fixed_in":["0:0.26.2-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"p11-kit-client","fixed_in":["0:0.26.2-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"p11-kit-client-debuginfo","fixed_in":["0:0.26.2-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"p11-kit-debuginfo","fixed_in":["0:0.26.2-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"p11-kit-debugsource","fixed_in":["0:0.26.2-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"p11-kit-server-debuginfo","fixed_in":["0:0.26.2-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"p11-kit-trust","fixed_in":["0:0.26.2-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"p11-kit-trust-debuginfo","fixed_in":["0:0.26.2-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"mingw32-p11-kit","fixed_in":["0:0.26.2-1.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"mingw64-p11-kit","fixed_in":["0:0.26.2-1.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"p11-kit","fixed_in":["0:0.26.2-1.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"p11-kit-client","fixed_in":["0:0.26.2-1.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"p11-kit-devel","fixed_in":["0:0.26.2-1.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"p11-kit-server","fixed_in":["0:0.26.2-1.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"p11-kit-trust","fixed_in":["0:0.26.2-1.1.hum1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"p11-kit","fixed_in":["0:0.26.2-1.el10"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"p11-kit","fixed_in":["0:0.26.2-1.el9"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"p11-kit","fixed_in":["0.26.2-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.21","package":"p11-kit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"p11-kit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"p11-kit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"p11-kit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.2-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"p11-kit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.2-1.el10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"p11-kit-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.2-1.el10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"p11-kit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.2-1.el10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"p11-kit-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.2-1.el10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"p11-kit-trust","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.2-1.el10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"p11-kit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.2-1.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"p11-kit-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.2-1.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"p11-kit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.2-1.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"p11-kit-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.2-1.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"p11-kit-trust","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.2-1.el9"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"p11-kit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.2-2"}]}],"versions":["0.25.10-1","0.25.5-3","0.25.9-1","0.25.9-2","0.26.2-1"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"p11-kit-client-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.2-1.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"p11-kit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.2-1.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"p11-kit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.2-1.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"p11-kit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.2-1.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"p11-kit-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.2-1.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"p11-kit-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.2-1.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"p11-kit-trust-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.2-1.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"p11-kit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.2-1.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"p11-kit-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.2-1.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"p11-kit-trust","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.2-1.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"p11-kit-client-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.2-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"p11-kit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.2-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"p11-kit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.2-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"p11-kit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.2-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"p11-kit-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.2-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"p11-kit-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.2-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"p11-kit-trust-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.2-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"p11-kit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.2-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"p11-kit-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.2-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"p11-kit-client-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.2-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"p11-kit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.2-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"p11-kit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.2-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"p11-kit-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.2-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"p11-kit-trust","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.2-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"p11-kit-trust-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.2-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mingw32-p11-kit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.2-1.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mingw64-p11-kit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.2-1.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"p11-kit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.2-1.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"p11-kit-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.2-1.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"p11-kit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.2-1.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"p11-kit-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.2-1.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"p11-kit-trust","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.2-1.1.hum1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"p11-kit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.2-1.el10"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"p11-kit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.2-1.el9"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"p11-kit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.2-1.1"}]}]}],"products":[{"vendor":"microsoft","product":"p11-kit"},{"vendor":"p11-glue","product":"p11-kit"},{"vendor":"p11-kit_project","product":"p11-kit"},{"vendor":"red hat","product":"cert manager support for red hat openshift release 1.17"},{"vendor":"red hat","product":"cert manager support for red hat openshift release 1.18"},{"vendor":"red hat","product":"cert manager support for red hat openshift release 1.20"},{"vendor":"red hat","product":"cost management 4"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat hardened images"},{"vendor":"red hat","product":"red hat insights proxy 1.5"},{"vendor":"red hat","product":"red hat openshift container platform 4"},{"vendor":"red hat","product":"red hat update infrastructure 5"},{"vendor":"redhat","product":"cert-manager_operator"},{"vendor":"redhat","product":"cost_management_metrics_operator"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"hardened_images"},{"vendor":"redhat","product":"insights-proxy"},{"vendor":"redhat","product":"update_infrastructure"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:18143","tags":["vendor-advisory","x_refsource_REDHAT","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:18599","tags":["vendor-advisory","x_refsource_REDHAT","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:21275","tags":["vendor-advisory","x_refsource_REDHAT","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:22634","tags":["vendor-advisory","x_refsource_REDHAT","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:27998","tags":["vendor-advisory","x_refsource_REDHAT","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:58981","tags":["vendor-advisory","x_refsource_REDHAT","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:7065","tags":["vendor-advisory","x_refsource_REDHAT","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:72502","tags":["vendor-advisory","x_refsource_REDHAT","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82304","tags":["vendor-advisory","x_refsource_REDHAT","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82322","tags":["vendor-advisory","x_refsource_REDHAT","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82347","tags":["vendor-advisory","x_refsource_REDHAT","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82354","tags":["vendor-advisory","x_refsource_REDHAT","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82372","tags":["vendor-advisory","x_refsource_REDHAT","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82857","tags":["vendor-advisory","x_refsource_REDHAT","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82888","tags":["vendor-advisory","x_refsource_REDHAT","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2100","tags":["vdb-entry","x_refsource_REDHAT","Vendor Advisory","report","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2437308","tags":["issue-tracking","x_refsource_REDHAT","Issue Tracking","Vendor Advisory","report"]},{"url":"https://github.com/p11-glue/p11-kit/pull/740","tags":["Issue Tracking","Patch","fix","article"]},{"url":"https://github.com/p11-glue/p11-kit/releases/tag/0.26.2","tags":["Product","Release Notes","web","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2100","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-hq85-3f6c-jx84"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-2100","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/2437308","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-18143.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-18599.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-2100","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://catalog.redhat.com/software/containers/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/2xxx/CVE-2026-2100.json","tags":["advisory"]},{"url":"https://github.com/p11-glue/p11-kit","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-2100","tags":["advisory"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/10.2_release_notes/index","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-121792","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-89706","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_18143.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2100","tags":["advisory","report"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.8_release_notes/index","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-91952","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_18599.json","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7065.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:18143","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:18599","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-2100","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2100","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-2100","title":"P11-kit: null dereference via c_derivekey with specific null parameters","description":"A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber or IBM btc derive mechanism parameters set to NULL. This could lead to the RPC-client attempting to return an uninitialized value, potentially resulting in a NULL dereference or undefined behavior. This issue may cause an application level denial of service or other unpredictable system states.","status":"published","published":"2026-03-26T20:01:46.174Z","modified":"2026-11-05T19:23:57.443Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-824"],"updated_at":"2026-11-05T20:54:59.423743Z"}],"euvd":[{"id":"EUVD-2026-16336","description":"A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber or IBM btc derive mechanism parameters set to NULL. This could lead to the RPC-client attempting to return an uninitialized value, potentially resulting in a NULL dereference or undefined behavior. This issue may cause an application level denial of service or other unpredictable system states.","status":"published","published":"2026-03-26T20:01:46Z","modified":"2026-11-05T19:23:57Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-05T20:01:48.21368Z"}],"ghsa":[{"id":"GHSA-hq85-3f6c-jx84","title":"A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the...","description":"A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber or IBM btc derive mechanism parameters set to NULL. This could lead to the RPC-client attempting to return an uninitialized value, potentially resulting in a NULL dereference or undefined behavior. This issue may cause an application level denial of service or other unpredictable system states.","status":"published","published":"2026-03-26T21:31:27Z","modified":"2026-10-14T21:32:24Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-824"],"updated_at":"2026-11-02T15:13:28.606179Z"}],"nvd":[{"id":"CVE-2026-2100","description":"A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber or IBM btc derive mechanism parameters set to NULL. This could lead to the RPC-client attempting to return an uninitialized value, potentially resulting in a NULL dereference or undefined behavior. This issue may cause an application level denial of service or other unpredictable system states.","status":"published","published":"2026-03-26T21:17:04.247Z","modified":"2026-11-05T20:17:56.94Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-824"],"updated_at":"2026-11-05T21:56:41.057422Z"}],"osv":[{"id":"ALPINE-CVE-2026-2100","description":"A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber or IBM btc derive mechanism parameters set to NULL. This could lead to the RPC-client attempting to return an uninitialized value, potentially resulting in a NULL dereference or undefined behavior. This issue may cause an application level denial of service or other unpredictable system states.","status":"published","published":"2026-03-26T21:17:04.247Z","modified":"2026-10-01T02:17:49.203063109Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:50.269992Z"},{"id":"BELL-CVE-2026-2100","title":"CVE-2026-2100 does not affect BellSoft software","status":"withdrawn","published":"2026-02-10T06:09:20.226723Z","modified":"2026-04-25T07:15:11.366553Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:23.037038Z"},{"id":"CVE-2026-2100","title":"P11-kit: null dereference via c_derivekey with specific null parameters","description":"A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber or IBM btc derive mechanism parameters set to NULL. This could lead to the RPC-client attempting to return an uninitialized value, potentially resulting in a NULL dereference or undefined behavior. This issue may cause an application level denial of service or other unpredictable system states.","status":"published","published":"2026-03-26T20:01:46.174Z","modified":"2026-11-07T02:30:44.665423246Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-824"],"updated_at":"2026-11-07T03:08:02.440811Z"},{"id":"DEBIAN-CVE-2026-2100","description":"A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber or IBM btc derive mechanism parameters set to NULL. This could lead to the RPC-client attempting to return an uninitialized value, potentially resulting in a NULL dereference or undefined behavior. This issue may cause an application level denial of service or other unpredictable system states.","status":"published","published":"2026-03-26T21:17:04.247Z","modified":"2026-10-30T09:49:20.200594072Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:53.097669Z"},{"id":"RHSA-2026:18143","title":"Red Hat Security Advisory: p11-kit security update","status":"published","published":"2026-05-19T10:06:36Z","modified":"2026-10-15T10:13:45Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:18599","title":"Red Hat Security Advisory: p11-kit security update","status":"published","published":"2026-05-20T10:09:24Z","modified":"2026-10-15T10:13:49Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:7065","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-04-25T10:09:32Z","modified":"2026-10-15T10:25:27Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RLSA-2026:18143","title":"Moderate: p11-kit security update","description":"The p11-kit packages provide a mechanism to manage PKCS#11 modules. The p11-kit-trust subpackage includes a PKCS#11 trust module that provides certificate anchors and black lists based on configuration files.\n\nSecurity Fix(es):\n\n* p11-kit: p11-kit: NULL dereference via C_DeriveKey with specific NULL parameters (CVE-2026-2100)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 10 Release Notes linked from the References section.","status":"published","published":"2026-05-29T16:03:24.060458Z","modified":"2026-05-29T16:30:19.643078786Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"RLSA-2026:18599","title":"Moderate: p11-kit security update","description":"The p11-kit packages provide a mechanism to manage PKCS#11 modules. The p11-kit-trust subpackage includes a PKCS#11 trust module that provides certificate anchors and black lists based on configuration files.\n\nSecurity Fix(es):\n\n* p11-kit: p11-kit: NULL dereference via C_DeriveKey with specific NULL parameters (CVE-2026-2100)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9 Release Notes linked from the References section.","status":"published","published":"2026-05-28T15:43:06.024531Z","modified":"2026-05-28T16:00:09.030891286Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"ALSA-2026:18143","title":"Moderate: p11-kit security update","description":"The p11-kit packages provide a mechanism to manage PKCS#11 modules. The p11-kit-trust subpackage includes a PKCS#11 trust module that provides certificate anchors and black lists based on configuration files.  \n\nSecurity Fix(es):  \n\n  * p11-kit: p11-kit: NULL dereference via C_DeriveKey with specific NULL parameters (CVE-2026-2100)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  \n\nAdditional Changes:  \n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.\n","status":"published","published":"2026-05-19T00:00:00Z","modified":"2026-10-29T11:30:12.108484678Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"ALSA-2026:18599","title":"Moderate: p11-kit security update","description":"The p11-kit packages provide a mechanism to manage PKCS#11 modules. The p11-kit-trust subpackage includes a PKCS#11 trust module that provides certificate anchors and black lists based on configuration files.  \n\nSecurity Fix(es):  \n\n  * p11-kit: p11-kit: NULL dereference via C_DeriveKey with specific NULL parameters (CVE-2026-2100)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  \n\nAdditional Changes:  \n\nFor detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.\n","status":"published","published":"2026-05-19T00:00:00Z","modified":"2026-10-29T11:32:31.167800876Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"openSUSE-SU-2026:10169-1","title":"libp11-kit0-0.26.2-1.1 on GA media","description":"These are all security issues fixed in the libp11-kit0-0.26.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-02-10T00:00:00Z","modified":"2026-03-23T04:54:31.794752Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"UBUNTU-CVE-2026-2100","description":"[NULL dereference via C_DeriveKey with specific NULL parameters]","status":"withdrawn","published":"2026-02-09T00:00:00Z","modified":"2026-02-10T08:06:11.065862Z","updated_at":"2026-11-02T16:56:01.334185Z"}]}}