In NetBSD up to and including 9.2, the IPv6 fragment ID generation algorithm employs a weak cryptographic PRNG.
netbsd netbsd