1 files changed, 7 insertions, 1 deletions

diff --git a/net/ipv4/tcp_input.c b/net/ipv4/tcp_input.c
index 4eb0c8ca3c60..5def3c48870e 100644
--- a/net/ipv4/tcp_input.c
+++ b/net/ipv4/tcp_input.c
@@ -6498,7 +6498,13 @@ int tcp_conn_request(struct request_sock_ops *rsk_ops,
                 af_ops->send_synack(fastopen_sk, dst, &fl, req,
                                     &foc, TCP_SYNACK_FASTOPEN);
                 /* Add the child socket directly into the accept queue */
-                inet_csk_reqsk_queue_add(sk, req, fastopen_sk);
+                if (!inet_csk_reqsk_queue_add(sk, req, fastopen_sk)) {
+                        reqsk_fastopen_remove(fastopen_sk, req, false);
+                        bh_unlock_sock(fastopen_sk);
+                        sock_put(fastopen_sk);
+                        reqsk_put(req);
+                        goto drop;
+                }
                 sk->sk_data_ready(sk);
                 bh_unlock_sock(fastopen_sk);
                 sock_put(fastopen_sk);