Hashing a derived key is not a security issue because cryptographic hashes are one way. There are two ways people could attack the derived key.
Guess a password, process it using PBKDF2, SHA-512 hash the result and see if it matches
Guess a derived key (128 to 256 bits), SHA-512 hash it and see if it matches
The amount of work performed per guess with ...