Skip to main content
View

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain

  1. Access
    Attacker controls or impersonates remote PKCS#11 token
  2. Delivery
    Victim app calls C_DeriveKey via p11-kit RPC
  3. Exploit
    Attacker returns crafted IBM Kyber/BTC params with NULL pointer fields
  4. Execution
    Vulnerable deserializer leaves data uninitialized
  5. Persist
    Client dereferences uninitialized pointer
  6. Impact
    Application crash / denial of service

Vulnerability Assessment

Weakness
CWE
CWE-824
OWASP Top 10:2025
A06:2021 - Vulnerable and Outdated Components
ASVS 5.0
V15 - Secure Coding and Architecture Uninitialized pointer prevention
MITRE ATT&CK

1 technique across 1 tactic: Execution

The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up.

Sign in to read
Exploitation Conditions

Requires (1) the victim application to use p11-kit's PKCS#11 RPC client to communicate with a remote token endpoint that the attacker can control, impersonate, or otherwise influence - not a generic listening service on the victim host; (2) the application must invoke C_DeriveKey using either the IBM Kyber or IBM BTC derive mechanism, both of which are niche post-quantum / blockchain key-derivation paths not exercised by mainstream TLS or NSS workloads; (3) the attacker-supplied mechanism parameters must specify pCipher or pChainCode as NULL with the has_data flag set so the inverted branch leaves data uninitialized. Limiting factors: no exploitation against default desktop/server p11-kit deployments that only load local PKCS#11 modules, impact is limited to crash/DoS of the calling process (C:N/I:N), and SSVC reports Exploitation=none with EPSS at 0.10%.
Impact

CVSS 7.5 (AV:N/AC:L/PR:N/UI:N/C:N/I:N/A:H) reflects availability-only impact and matches the described NULL-dereference DoS. However, the description specifies the trigger as 'calling C_DeriveKey on a remote token,' which means the victim application must voluntarily speak PKCS#11 RPC to an attacker-influenced token - not a typical exposed network service - so the AV:N rating is generous and the practical attack surface is narrower than a 7.5 suggests. Corroborating signals support a moderate priority: EPSS is 0.10% (27th percentile), SSVC Exploitation is 'none,' Ubuntu rates it medium, and no public exploit identified at time of analysis; SSVC does mark it Automatable=yes and Technical Impact=partial, consistent with a reliable crash primitive once the path is reached. Net real-world risk is moderate availability impact on systems that connect p11-kit clients to untrusted remote PKCS#11 token providers, well below the headline CVSS for general workloads.
Exploit ScenarioDerived

A user or service is configured to use a remote PKCS#11 token via p11-kit's RPC proxy; the attacker controls or impersonates that remote token endpoint. When the client application invokes C_DeriveKey with an IBM Kyber or IBM BTC derive mechanism, the malicious token replies with crafted RPC parameters indicating has_data such that pCipher/pChainCode is left NULL, causing the client to dereference an uninitialized pointer and crash. No public exploit identified at time of analysis, but the upstream PR diff makes the vulnerable serialization logic clear and reproducing the crash from a custom RPC server is straightforward.
This Week Schedule remediation this week. Why: HIGH severity (CVSS 7.0-8.9).
Patch available 0.1% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv2 – Jun 22, 2026

Denial of service in p11-kit's PKCS#11 RPC client allows a malicious remote token to trigger a NULL pointer dereference or undefined behavior in applications consuming derive-key operations. The flaw is reachable when an application calls C_DeriveKey against a remote token using IBM Kyber or IBM BTC derive mechanisms whose parameters are NULL, with the RPC client returning an uninitialized value. EPSS is low (0.10%) and no public exploit identified at time of analysis; SSVC marks exploitation as none but automatable.

Earlier versions of this analysis (1)
v1 Jun 22, 2026 - 20:29 cvss changed CVSS 7.5

Denial of service in p11-kit's PKCS#11 RPC client allows remote attackers to crash applications by invoking C_DeriveKey against a remote token with IBM Kyber or IBM BTC derive mechanism parameters set to NULL, triggering use of an uninitialized value and a NULL pointer dereference. The flaw affects p11-kit as shipped in Red Hat Enterprise Linux 6 through 10 and OpenShift Container Platform 4, with patches now available via multiple RHSA errata. EPSS is low (0.10%, 27th percentile) and there is no public exploit identified at time of analysis.

RemediationAI

Apply the distribution-provided p11-kit update from vendor advisories - on Red Hat Enterprise Linux and OpenShift install the relevant errata (RHSA-2026:7065, RHSA-2026:18143, RHSA-2026:18599, RHSA-2026:21275, RHSA-2026:22634, RHSA-2026:27998) listed at https://access.redhat.com/security/cve/CVE-2026-2100, and pull Ubuntu/Debian package updates via standard channels. Upstream fix is available (PR/commit) at https://github.com/p11-glue/p11-kit/pull/740; a released patched upstream tag is not independently confirmed in the available data. If patching must be deferred, restrict p11-kit RPC clients to trusted local PKCS#11 modules only - do not configure proxy modules pointing at remote/untrusted tokens, avoid the IBM Kyber and IBM BTC derive mechanisms in workflows that talk to untrusted tokens, and segregate any p11-kit-server endpoints behind authenticated transport; the trade-off is loss of remote HSM/token federation and post-quantum/BTC key-derivation capability against those tokens until patches are deployed.

Affects your stack

Find out whether the stacks and servers you run are on an affected version.

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Sign in to check
Technical ContextAI · show details

p11-kit is the GNU/freedesktop PKCS#11 module loader and RPC proxy used by NSS, GnuTLS, OpenSSL engines and the gnome-keyring on most Linux distributions; it brokers cryptographic calls between client applications and PKCS#11 modules across an RPC channel. The vulnerable code paths are p11_rpc_buffer_get_ibm_kyber_mech_param_update and p11_rpc_buffer_get_ibm_btc_derive_mech_param_update in p11-kit/rpc-message.c, which deserialize IBM Kyber post-quantum and IBM BTC (Bitcoin/blockchain) derive mechanism parameters. The root cause is CWE-824 (access of uninitialized pointer): the routines used inverted has_data logic, allowing the data buffer to remain uninitialized while still being dereferenced or copied via memcpy into the caller's pCipher/pChainCode fields. The upstream fix in PR #740 inverts the has_data branch and adds an assert (data != NULL) guard before use.

Know when Red Hat Enterprise Linux 10 gets its next vulnerability

  • Watch products and get an email when something new is published
  • Check this CVE against your own stack and servers
  • Exploit and PoC references, threat intelligence from 22 sources
Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

NVD PRIMARY 7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
vuln.today AI 3.7 LOW

Network-reachable via RPC but requires victim to use attacker-controlled remote token and niche IBM Kyber/BTC mechanism (AC:H), no auth on the RPC client side (PR:N), only process-level crash (A:L, C/I:N).

3.1 AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
4.0 AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Ubuntu MEDIUM
SUSE HIGH
Red Hat 5.3 MEDIUM

Primary rating from NVD.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

6
Analysis Updated
Jun 22, 2026 - 20:29 vuln.today
v2 - CVSS changed
Analysis Updated
Jun 22, 2026 - 20:29 vuln.today
v1 - CVSS changed
Severity Changed
Jun 22, 2026 - 20:24 NVD
MEDIUM HIGH
CVSS changed
Jun 22, 2026 - 20:24 NVD
5.3 (MEDIUM) 7.5 (HIGH)
Patch released
Mar 31, 2026 - 21:13 nvd
Patch available
CVE Published
Mar 26, 2026 - 20:01 nvd
MEDIUM 5.3

DescriptionNVD

A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber or IBM btc derive mechanism parameters set to NULL. This could lead to the RPC-client attempting to return an uninitialized value, potentially resulting in a NULL dereference or undefined behavior. This issue may cause an application level denial of service or other unpredictable system states.

Executive ViewAI

Why It Matters

p11-kit, a library used to integrate hardware security tokens with business applications, contains a denial-of-service vulnerability affecting organizations that rely on token-based authentication and encryption. The flaw has no known active exploitation at this time, but requires prompt patching to prevent disruptions to authentication and cryptographic services.

Business Impact: High
Compensating Controls

Apply vendor patch.

Threat Intelligence Overview

EPSS Score
0.1%
Top 73% exploitable
Data Quality
8 sources
Confidence: High
EUVD NVD CVE.org EPSS Vulnrichment Vendor GitHub VulDB

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue
Severity HIGH
CISA KEV No
Public POC No
EPSS 0.1%
Patch available Yes
Active threat No
Deciding rule
HIGH severity (CVSS 7.0-8.9)
What every action level means
Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.
Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.
This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.
This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.
Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision
Scheduled
Exploitation
None
System Exposure· derived
Open
Automatable
Yes
Human Impact
High
Technical Impact
Partial

Priority Score

38
Low Medium High Critical
KEV: 0
EPSS: 0
CVSS: +38
PoC: 0
Weaponized: 0
Threat intel: 0
Gov advisory: 0

Attack Technique

Memory Corruption HIGH

Memory corruption occurs when a program writes data beyond the boundaries of allocated memory regions or accesses memory in unintended ways, violating the integrity of the process's address space.

Denial of Service MEDIUM

Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.

Affected Products (CPE)NVD

cpe:2.3:a:red_hat:red_hat_enterprise_linux_10:*:*:*:*:*:*:*:*
cpe:2.3:a:red_hat:red_hat_enterprise_linux_6:*:*:*:*:*:*:*:*
cpe:2.3:a:red_hat:red_hat_enterprise_linux_7:*:*:*:*:*:*:*:*
cpe:2.3:a:red_hat:red_hat_enterprise_linux_8:*:*:*:*:*:*:*:*
cpe:2.3:a:red_hat:red_hat_enterprise_linux_9:*:*:*:*:*:*:*:*
cpe:2.3:a:red_hat:red_hat_openshift_container_platform_4:*:*:*:*:*:*:*:*

More in Red Hat Enterprise Linux 10

View all
CVE-2026-18663 MEDIUM
5.9 Aug 12

Heap corruption via double-free in 389-ds-base's LDAP control parsing allows an unauthenticated remote attacker to crash
CVE-2026-4631 CRITICAL POC
9.8 Apr 07

Remote code execution in Cockpit's web interface allows unauthenticated attackers to execute arbitrary commands on the h
CVE-2026-4480 CRITICAL POC
9.0 May 26

Remote code execution in Samba's printing subsystem allows remote attackers to inject arbitrary shell commands via craft
CVE-2026-101258 HIGH POC
7.8 Oct 06

Ghostscript can execute arbitrary shell commands with the privileges of its process when it renders a crafted PostScript
CVE-2026-96889 HIGH POC
7.8 Sep 23

Use-after-free in librsvg during rendering of crafted SVG documents with nested XInclude directives and duplicate entity
CVE-2026-4775 HIGH POC
7.8 Mar 24

A signed integer overflow vulnerability exists in the libtiff library's putcontig8bitYCbCr44tile function that leads to

CVE-2026-114406 MEDIUM POC
6.8 Oct 21

The system CA trust store shipped in Red Hat's ca-certificates RPM packages includes eMudhra root authorities that signe
CVE-2026-18922 CRITICAL
9.8 Sep 07

Authentication bypass in 389 Directory Server (shipped as Red Hat Directory Server 11-13 and within RHEL 6-10) lets remo
CVE-2026-14544 CRITICAL
9.8 Jul 03

Remote code execution and privilege escalation in HPLIP (HP Linux Imaging and Printing) affects the hpcups print filter

CVE-2026-76578 CRITICAL
9.8 Sep 07

Unauthenticated privilege escalation in FreeIPA (Red Hat Identity Management) allows a remote attacker to gain genuine a
CVE-2026-102560 CRITICAL
9.8 Sep 29

A heap buffer overflow exists in libsoup's WebSocket permessage-deflate compression path: when a very large outbound mes
CVE-2026-5121 HIGH
7.5 Mar 30

Remote code execution in libarchive on 32-bit systems allows unauthenticated attackers to execute arbitrary code via spe

Same weakness CWE-824 – Access of Uninitialized Pointer

View all
CVE-2015-1770 HIGH
8.8
CVE-2016-4343 HIGH POC
8.8
CVE-2018-19857 CRITICAL POC
9.1
CVE-2020-25573 CRITICAL POC
9.8
CVE-2018-11743 CRITICAL POC
9.8
CVE-2018-9948 MEDIUM POC
6.5
CVE-2018-3842 HIGH POC
8.8
CVE-2026-67281 HIGH POC
8.7

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Vendor StatusVendor

Ubuntu

Priority: Medium
p11-kit
Release Status Version
bionic not-affected code not present
focal not-affected code not present
jammy not-affected code not present
noble not-affected code not present
questing not-affected code not present
trusty not-affected code not present
upstream released 0.26.2-1
xenial not-affected code not present

Debian

p11-kit
Release Status Fixed Version Urgency
bullseye not-affected - -
bookworm not-affected - -
trixie not-affected - -
forky, sid fixed 0.26.2-2 -
experimental fixed 0.26.2-1 -
(unstable) fixed 0.26.2-2 -

SUSE

Severity: High
Product Status
openSUSE Tumbleweed Fixed
SLES15-SP5-CHOST-BYOS-SAP-CCloud Fixed
SLES15-SP6-CHOST-BYOS Fixed
SLES15-SP6-CHOST-BYOS-Aliyun Fixed
SLES15-SP6-CHOST-BYOS-Azure Fixed

References

Advisories & patches
ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2026-2100 ADVISORY https://vuldb.com/vuln/344680 REF https://access.redhat.com/errata/RHSA-2026:18143 REF https://access.redhat.com/errata/RHSA-2026:18599 REF https://access.redhat.com/errata/RHSA-2026:21275 REF https://access.redhat.com/errata/RHSA-2026:22634 REF https://access.redhat.com/errata/RHSA-2026:27998 REF https://access.redhat.com/errata/RHSA-2026:58981 REF https://access.redhat.com/errata/RHSA-2026:7065 REF https://access.redhat.com/errata/RHSA-2026:72502 REF https://access.redhat.com/errata/RHSA-2026:82304 REF https://access.redhat.com/errata/RHSA-2026:82322 REF https://access.redhat.com/errata/RHSA-2026:82347 REF https://access.redhat.com/errata/RHSA-2026:82354 REF https://access.redhat.com/errata/RHSA-2026:82372 REF https://access.redhat.com/errata/RHSA-2026:82857 REF https://access.redhat.com/errata/RHSA-2026:82888 REF https://access.redhat.com/security/cve/CVE-2026-2100 REF https://bugzilla.redhat.com/show_bug.cgi?id=2437308 REF https://github.com/p11-glue/p11-kit/pull/740 REF https://github.com/p11-glue/p11-kit/releases/tag/0.26.2

Search Externally

GitHub PoC Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy