diff --git a/drivers/net/vxlan.c b/drivers/net/vxlan.c index d6ae6d3c98ed..c12f2984d7ef 100644 --- a/drivers/net/vxlan.c +++ b/drivers/net/vxlan.c @@ -1476,6 +1476,10 @@ static struct sk_buff *vxlan_na_create(struct sk_buff *request, daddr = eth_hdr(request)->h_source; ns_olen = request->len - skb_transport_offset(request) - sizeof(*ns); for (i = 0; i < ns_olen-1; i += (ns->opt[i+1]<<3)) { + if (!ns->opt[i + 1]) { + kfree_skb(reply); + return NULL; + } if (ns->opt[i] == ND_OPT_SOURCE_LL_ADDR) { daddr = ns->opt + i + sizeof(struct nd_opt_hdr); break;