diff --git a/nss-3.112-fix-get-interface.patch b/nss-3.112-fix-get-interface.patch
new file mode 100644
index 0000000..3d8e95e
--- /dev/null
+++ b/nss-3.112-fix-get-interface.patch
@@ -0,0 +1,44 @@
+diff --git a/lib/softoken/fipstokn.c b/lib/softoken/fipstokn.c
+--- a/lib/softoken/fipstokn.c
++++ b/lib/softoken/fipstokn.c
+@@ -244,17 +244,17 @@ fc_getAttribute(CK_ATTRIBUTE_PTR pTempla
+ 
+ #define CK_PKCS11_FUNCTION_INFO(name) CK_RV __PASTE(F, name)
+ #define CK_NEED_ARG_LIST 1
+ 
+ #include "pkcs11f.h"
+ 
+ /* ------------- build the CK_CRYPTO_TABLE ------------------------- */
+ static CK_FUNCTION_LIST_3_0 sftk_fipsTable = {
+-    { CRYPTOKI_VERSION_MAJOR, CRYPTOKI_VERSION_MINOR },
++    { 3, 0 },
+ 
+ #undef CK_NEED_ARG_LIST
+ #undef CK_PKCS11_FUNCTION_INFO
+ 
+ #define CK_PKCS11_FUNCTION_INFO(name) \
+     __PASTE(F, name)                  \
+     ,
+ 
+diff --git a/lib/softoken/pkcs11.c b/lib/softoken/pkcs11.c
+--- a/lib/softoken/pkcs11.c
++++ b/lib/softoken/pkcs11.c
+@@ -107,17 +107,17 @@ static PRIntervalTime loginWaitTime;
+ #define CK_PKCS11_FUNCTION_INFO(name) CK_RV __PASTE(F, name)
+ #define CK_NEED_ARG_LIST 1
+ 
+ #include "pkcs11f.h"
+ #endif
+ 
+ /* build the crypto module table */
+ static CK_FUNCTION_LIST_3_0 sftk_funcList = {
+-    { CRYPTOKI_VERSION_MAJOR, CRYPTOKI_VERSION_MINOR },
++    { 3, 0 },
+ 
+ #undef CK_PKCS11_FUNCTION_INFO
+ #undef CK_NEED_ARG_LIST
+ 
+ #define CK_PKCS11_FUNCTION_INFO(func) \
+     __PASTE(NS, func)                 \
+     ,
+ #include "pkcs11f.h"
diff --git a/nss.spec b/nss.spec
index 443ad81..270d129 100644
--- a/nss.spec
+++ b/nss.spec
@@ -63,7 +63,7 @@ print(string.sub(hash, 0, 16))
 Summary:          Network Security Services
 Name:             nss
 Version:          %{nss_version}
-Release:          3%{?dist}
+Release:          4%{?dist}
 License:          MPLv2.0
 URL:              http://www.mozilla.org/projects/security/pki/nss/
 Requires:         nspr >= %{nspr_version}%{nspr_release}
@@ -194,6 +194,7 @@ Patch94:          nss-3.112-add-ml-dsa-gtests-el8.patch
 Patch95:          nss-3.112-add-ml-dsa-ssl-support-el8.patch
 Patch96:          nss-3.112-fips-and-fixes-el8.patch
 Patch97:          nss-3.112-big-endian-compression-fix.patch
+Patch98:          nss-3.112-fix-get-interface.patch
 
 %description
 Network Security Services (NSS) is a set of libraries designed to
@@ -995,6 +996,9 @@ update-crypto-policies --no-reload &> /dev/null || :
 
 
 %changelog
+* Thu Aug 7 2025 Bob Relyea <rrelyea@redhat.com> - 3.112.0-4
+- fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly
+
 * Fri Aug 1 2025 Bob Relyea <rrelyea@redhat.com> - 3.112.0-3
 - restore CONCATENATE functions accidentally remvoed in the last patch
 - fix big endian issue in tstclnt and selfserv in certificate compression