CVE-2006-0145: Netbsd

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

The kernfs_xread function in kernfs in NetBSD 1.6 through 2.1, and OpenBSD 3.8, does not properly validate file offsets against negative 32-bit values that occur as a result of truncation, which allows local users to read arbitrary kernel memory and gain privileges via the lseek system call.

Affected products

• Netbsd Netbsd: version 1.6 only; version 1.6.1 only; version 1.6.2 only; version 2.0 only; version 2.0.1 only; version 2.0.2 only; …

Published 2006-01-09. Last modified 2026-06-16.