The sendmsg function in NetBSD-current before 20061023 NetBSD 3.0 and 3.0.1 before 20061024 and NetBSD 2.x before 20061029 when run on a 64-bit architecture allows attackers to cause a denial of service (kernel panic) via an invalid msg_controllen parameter to the sendit function.