Summary
The p11-kit packages provide a mechanism to manage PKCS#11 modules. The p11-kit-trust subpackage includes a PKCS#11 trust module that provides certificate anchors and black lists based on configuration files.
Security Fix(es):
* p11-kit: p11-kit: NULL dereference via C_DeriveKey with specific NULL parameters (CVE-2026-2100)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | p11-kit | 0.26.2-1.el9 |
| AlmaLinux · 9 | p11-kit-client | 0.26.2-1.el9 |
| AlmaLinux · 9 | p11-kit-devel | 0.26.2-1.el9 |
| AlmaLinux · 9 | p11-kit-server | 0.26.2-1.el9 |
| AlmaLinux · 9 | p11-kit-trust | 0.26.2-1.el9 |
Vulnerabilities 1
-
Medium 5.3
P11-kit: null dereference via c_derivekey with specific null parameters
A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber or IBM btc derive mechanism parameters set to NULL. This could lead to the RPC-client attempting to r…