CVE-2026-2100

Publication date 9 February 2026

Last updated 9 February 2026

Ubuntu priority

Medium

Why this priority?

Description

[NULL dereference via C_DeriveKey with specific NULL parameters]

Read the notes from the security team

Status

Package Ubuntu Release Status
p11-kit 25.10 questing
Not affected
24.04 LTS noble
Not affected
22.04 LTS jammy
Not affected
20.04 LTS focal
Not affected
18.04 LTS bionic
Not affected
16.04 LTS xenial
Not affected
14.04 LTS trusty
Not affected

Notes

mdeslaur

Per Debian, vulnerable code introduced in 0.25.6 with the following commits: https://github.com/p11-glue/p11-kit/commit/aee856f75e06e451a34cb1fdd6630945c9d1623c https://github.com/p11-glue/p11-kit/commit/d7523b1031938fdd9740757f90e903aa09f5397d

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
p11-kit

References

Other references