In NetBSD up to and including 9.2, the IPv6 Flow Label generation algorithm employs a weak cryptographic PRNG.
netbsd netbsd