1 files changed, 3 insertions, 0 deletions

diff --git a/drivers/scsi/sg.c b/drivers/scsi/sg.c
index d383f84869aa..b5a4db883223 100644
--- a/drivers/scsi/sg.c
+++ b/drivers/scsi/sg.c
@@ -1744,6 +1744,9 @@ sg_start_req(Sg_request *srp, unsigned char *cmd)
                         md->from_user = 0;
         }
 
+        if (unlikely(iov_count > MAX_UIOVEC))
+                return -EINVAL;
+
         if (iov_count) {
                 int size = sizeof(struct iovec) * iov_count;
                 struct iovec *iov;