diff --git a/net/core/skmsg.c b/net/core/skmsg.c index 4d75ef9d24bf..f5367356a483 100644 --- a/net/core/skmsg.c +++ b/net/core/skmsg.c @@ -432,6 +432,10 @@ int sk_msg_recvmsg(struct sock *sk, struct sk_psock *psock, struct msghdr *msg, sge = sk_msg_elem(msg_rx, i); copy = sge->length; page = sg_page(sge); + if (!page) { + copied = copied ? copied : -EFAULT; + goto out; + } if (copied + copy > len) copy = len - copied; copy = copy_page_to_iter(page, sge->offset, copy, iter);