diff --git a/kernel/futex.c b/kernel/futex.c index 776c359ec00483910847236a91143b9321fe504f..14474bfb16996510ba34bd4941d022f490ddd489 100644 --- a/kernel/futex.c +++ b/kernel/futex.c @@ -1705,6 +1705,9 @@ static int futex_requeue(u32 __user *uaddr1, unsigned int flags, struct futex_q *this, *next; WAKE_Q(wake_q); + if (nr_wake < 0 || nr_requeue < 0) + return -EINVAL; + if (requeue_pi) { /* * Requeue PI only works on two distinct uaddrs. This