← CVE Intelligence

CVE-2026-2100

P11-kit: null dereference via c_derivekey with specific null parameters PUBLISHED

Description (CNA)

A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber or IBM btc derive mechanism parameters set to NULL. This could lead to the RPC-client attempting to return an uninitialized value, potentially resulting in a NULL dereference or undefined behavior. This issue may cause an application level denial of service or other unpredictable system states.

Affected (CNA)

Vendor / productVersions
p11-glue / p11-kitaffected 0 before 0.26.2
Red Hat / Red Hat Enterprise Linux 10unaffected 0:0.26.2-1.el10 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:0.26.2-1.el9 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:0.26.2-1.el9 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17unaffected 1791371080 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17unaffected 1791371069 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17unaffected 1791788287 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17unaffected 1791970484 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791459707 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791459711 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791459759 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1789029076 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791966259 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790598593 before *
Red Hat / Cost Management 4unaffected 1780946239 before *
Red Hat / Red Hat Hardened Imagesunaffected 0.26.2-1.1.hum1 before *
Red Hat / Red Hat Insights proxy 1.5unaffected 1780420428 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1779798159 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1779798164 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1779798165 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1779798222 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1787241211 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1787135742 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1787241260 before *
Red Hat / Red Hat Enterprise Linux 6unaffected
Red Hat / Red Hat Enterprise Linux 7unaffected
Red Hat / Red Hat Enterprise Linux 8unaffected
Red Hat / Red Hat OpenShift Container Platform 4unknown
Red Hat / Red Hat OpenShift Container Platform 4unaffected
Red Hat / Red Hat OpenShift Container Platform 4unaffected

CWE

CWE-824

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.