NetBSD vulnerabilities

2 known vulnerabilities in NetBSD from The NetBSD Foundation. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.0 High severity

  NetBSD: Double Free

  CVE-2026-57842Sep 11, 2026The NetBSD Foundation

  NetBSD contains a use-after-free and double-free vulnerability in msg_recv_copyin() within the COMPAT_NETBSD32 compatibility layer due to a missing return statement before the cleanup label on the success path. Any local user able to execute a 32-bit binary on

• 7.0 High severity

  NetBSD: Missing Authorization

  CVE-2026-53996Aug 12, 2026The NetBSD Foundation

  NetBSD's hdaudio(4) driver in sys/dev/hdaudio/hdaudio.c contains a missing access control vulnerability that allows unprivileged local attackers to invoke the HDAUDIO_FGRP_SETCONFIG ioctl without elevated permissions by exploiting the absence of an access chec