CVE-2026-2100 P11-kit: null dereference via c_derivekey with specific null parameters
A remote attacker can cause a denial of service in p11-kit by triggering a null dereference via specific C_DeriveKey parameters.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-2100?
CVE-2026-2100 is a medium-severity vulnerability in Redhat Enterprise Linux, published on 26 Mar 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber or IBM btc derive mechanism parameters set to NULL. This could lead to the RPC-client attempting to return an uninitialized value, potentially resulting in a NULL dereference or undefined behavior. This issue may cause an application level denial of service or other unpredictable system states.
Weakness: CWE-824
Which versions are affected by CVE-2026-2100?
It affects 7 products.
Linux distribution packages (40)
p11-kit AlmaLinux:10 | All versions | 0.26.2-1.el10 |
p11-kit-client AlmaLinux:10 | All versions | 0.26.2-1.el10 |
p11-kit-devel AlmaLinux:10 | All versions | 0.26.2-1.el10 |
p11-kit-server AlmaLinux:10 | All versions | 0.26.2-1.el10 |
p11-kit-trust AlmaLinux:10 | All versions | 0.26.2-1.el10 |
p11-kit AlmaLinux:9 | All versions | 0.26.2-1.el9 |
p11-kit-client AlmaLinux:9 | All versions | 0.26.2-1.el9 |
p11-kit-devel AlmaLinux:9 | All versions | 0.26.2-1.el9 |
p11-kit-server AlmaLinux:9 | All versions | 0.26.2-1.el9 |
p11-kit-trust AlmaLinux:9 | All versions | 0.26.2-1.el9 |
p11-kit Red Hat:enterprise_linux:10.2 | All versions | 0:0.26.2-1.el10 |
p11-kit-client Red Hat:enterprise_linux:10.2 | All versions | 0:0.26.2-1.el10 |
p11-kit-client-debuginfo Red Hat:enterprise_linux:10.2 | All versions | 0:0.26.2-1.el10 |
p11-kit-debuginfo Red Hat:enterprise_linux:10.2 | All versions | 0:0.26.2-1.el10 |
p11-kit-debugsource Red Hat:enterprise_linux:10.2 | All versions | 0:0.26.2-1.el10 |
p11-kit-devel Red Hat:enterprise_linux:10.2 | All versions | 0:0.26.2-1.el10 |
p11-kit-server Red Hat:enterprise_linux:10.2 | All versions | 0:0.26.2-1.el10 |
p11-kit-server-debuginfo Red Hat:enterprise_linux:10.2 | All versions | 0:0.26.2-1.el10 |
p11-kit-trust Red Hat:enterprise_linux:10.2 | All versions | 0:0.26.2-1.el10 |
p11-kit-trust-debuginfo Red Hat:enterprise_linux:10.2 | All versions | 0:0.26.2-1.el10 |
p11-kit-client-debuginfo Red Hat:enterprise_linux:9::appstream | All versions | 0:0.26.2-1.el9 |
p11-kit-debuginfo Red Hat:enterprise_linux:9::appstream | All versions | 0:0.26.2-1.el9 |
p11-kit-debugsource Red Hat:enterprise_linux:9::appstream | All versions | 0:0.26.2-1.el9 |
p11-kit-devel Red Hat:enterprise_linux:9::appstream | All versions | 0:0.26.2-1.el9 |
p11-kit-server Red Hat:enterprise_linux:9::appstream | All versions | 0:0.26.2-1.el9 |
p11-kit-server-debuginfo Red Hat:enterprise_linux:9::appstream | All versions | 0:0.26.2-1.el9 |
p11-kit-trust-debuginfo Red Hat:enterprise_linux:9::appstream | All versions | 0:0.26.2-1.el9 |
p11-kit Red Hat:enterprise_linux:9::baseos | All versions | 0:0.26.2-1.el9 |
p11-kit-client Red Hat:enterprise_linux:9::baseos | All versions | 0:0.26.2-1.el9 |
p11-kit-client-debuginfo Red Hat:enterprise_linux:9::baseos | All versions | 0:0.26.2-1.el9 |
p11-kit-debuginfo Red Hat:enterprise_linux:9::baseos | All versions | 0:0.26.2-1.el9 |
p11-kit-debugsource Red Hat:enterprise_linux:9::baseos | All versions | 0:0.26.2-1.el9 |
p11-kit-server-debuginfo Red Hat:enterprise_linux:9::baseos | All versions | 0:0.26.2-1.el9 |
p11-kit-trust Red Hat:enterprise_linux:9::baseos | All versions | 0:0.26.2-1.el9 |
p11-kit-trust-debuginfo Red Hat:enterprise_linux:9::baseos | All versions | 0:0.26.2-1.el9 |
mingw32-p11-kit Red Hat:hummingbird:1 | All versions | 0:0.26.2-1.1.hum1 |
mingw64-p11-kit Red Hat:hummingbird:1 | All versions | 0:0.26.2-1.1.hum1 |
p11-kit Red Hat:hummingbird:1 | All versions | 0:0.26.2-1.1.hum1 |
p11-kit-client Red Hat:hummingbird:1 | All versions | 0:0.26.2-1.1.hum1 |
p11-kit-devel Red Hat:hummingbird:1 | All versions | 0:0.26.2-1.1.hum1 |
Products include P11-Kit Project P11-Kit, Redhat Cert-Manager Operator, Redhat Cost Management Metrics Operator, Redhat Enterprise Linux, Redhat Hardened Images, Redhat Insights-Proxy and 1 more.
How do I fix CVE-2026-2100?
Apply the vendor's patch.
Is CVE-2026-2100 being exploited?
There is no known exploitation of CVE-2026-2100 in the wild and no public exploit code.
Other vulnerabilities in Redhat Enterprise Linux
Sources
Also known as ALPINE-CVE-2026-2100, ALSA-2026:18143, ALSA-2026:18599, DEBIAN-CVE-2026-2100, ECHO-7889-82b6-071e, GHSA-hq85-3f6c-jx84 and 6 more.