Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: The NetBSD Foundation Clear all filters
TI-2026-41654 CVE-2026-57843 · GHSA-p59p-jjhh-5885

NetBSD mm_open() PK_KMEM Flag Kernel Pointer Information Disclosure

Priority LOW 29

NetBSD contains an information disclosure vulnerability in mm_open() within sys/dev/mm.c that allows unprivileged local users to obtain real kernel virtual addresses by opening world-accessible devices such as /dev/null…

CVSS 4.0MEDIUM 6.8 Local Low privileges No interaction EPSS 0.00145 Published 2026-09-11 Fixed in 9.5 CWE-732
TI-2026-41653 CVE-2026-57842 · GHSA-gq6w-h4cf-wpff

NetBSD COMPAT_NETBSD32 Double Free / Use-After-Free via recvmsg() msg_iovlen

Priority LOW 33

NetBSD contains a use-after-free and double-free vulnerability in msg_recv_copyin() within the COMPAT_NETBSD32 compatibility layer due to a missing return statement before the cleanup label on the success path.

CVSS 4.0HIGH 7.3 Local Low privileges No interaction EPSS 0.00135 Published 2026-09-11 Fixed in 9.5 CWE-415
TI-2026-38948 CVE-2026-53996 · GHSA-2q5f-pw9r-2w7m

NetBSD hdaudio(4) Driver Privilege Bypass Use-After-Free via HDAUDIO_FGRP_SETCONFIG ioctl

Priority LOW 33

NetBSD's hdaudio(4) driver in sys/dev/hdaudio/hdaudio.c contains a missing access control vulnerability that allows unprivileged local attackers to invoke the HDAUDIO_FGRP_SETCONFIG ioctl without elevated permissions by…

CVSS 4.0HIGH 7.3 Local Low privileges No interaction EPSS 0.00128 Published 2026-08-12 No fix listed CWE-862