CVE-2026-57843 is an information disclosure vulnerability in NetBSD's mm_open() function within sys/dev/mm.c. Unprivileged local users can exploit this vulnerability to obtain real kernel virtual addresses by opening world-accessible devices such as /dev/null or /dev/zero. The vulnerability is caused by these devices incorrectly receiving the PK_KMEM process flag, allowing attackers to bypass the CANSEE_K [truncated]
A use-after-free and double-free vulnerability exists in NetBSD's COMPAT_NETBSD32 compatibility layer within msg_recv_copyin(). A local user can trigger a kernel panic or memory corruption by executing a 32-bit binary on a 64-bit NetBSD system and calling recvmsg() with msg_iovlen between 9 and IOV_MAX. This issue allows for potential system instability and defenders should assess exposure and prioritize [truncated]
