Security Advisory

CVE-2026-2100

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-03-26 20:01:46

Last updated 2026-07-25 23:54:19

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber or IBM btc derive mechanism parameters set to NULL. This could lead to the RPC-client attempting to return an uninitialized value, potentially resulting in a NULL dereference or undefined behavior. This issue may cause an application level denial of service or other unpredictable system states.

← Browse all CVEs View on cve.org ↗