--- arch/arm/kernel/sys_oabi-compat.c

+++ arch/arm/kernel/sys_oabi-compat.c

@@ -311,7 +311,7 @@ asmlinkage long sys_oabi_semtimedop(int

long err;

int i;

- if (nsops < 1)

+ if (nsops < 1 || nsops > SEMOPM)

return -EINVAL;

sops = kmalloc(sizeof(*sops) * nsops, GFP_KERNEL);

if (!sops)