--- x/net/netfilter/ipset/ip_set_hash_net.c
+++ y/net/netfilter/ipset/ip_set_hash_net.c
@@ -192,6 +192,8 @@ hash_net4_uadt(struct ip_set *set, struc
 	do {
 		ipn = ip_set_range_to_cidr(ipn, ip_to, &e.cidr);
 		n++;
+		if (n > IPSET_MAX_RANGE)
+			return -ERANGE;
 	} while (ipn++ < ip_to);
 
 	if (n > IPSET_MAX_RANGE)