1 files changed, 4 insertions, 0 deletions

diff --git a/net/netlink/af_netlink.c b/net/netlink/af_netlink.c
index bca50b95c182..64334893c61c 100644
--- a/net/netlink/af_netlink.c
+++ b/net/netlink/af_netlink.c
@@ -1769,6 +1769,9 @@ struct sk_buff *netlink_alloc_skb(struct sock *ssk, unsigned int size,
         if (ring->pg_vec == NULL)
                 goto out_put;
 
+        if (ring->frame_size - NL_MMAP_HDRLEN < size)
+                goto out_put;
+
         skb = alloc_skb_head(gfp_mask);
         if (skb == NULL)
                 goto err1;
@@ -1778,6 +1781,7 @@ struct sk_buff *netlink_alloc_skb(struct sock *ssk, unsigned int size,
         if (ring->pg_vec == NULL)
                 goto out_free;
 
+        /* check again under lock */
         maxlen = ring->frame_size - NL_MMAP_HDRLEN;
         if (maxlen < size)
                 goto out_free;