--- drivers/usb/misc/iowarrior.c

+++ drivers/usb/misc/iowarrior.c

@@ -373,7 +373,7 @@ static ssize_t iowarrior_write(struct fi

case USB_DEVICE_ID_CODEMERCS_IOWPV2:

case USB_DEVICE_ID_CODEMERCS_IOW40:

/* IOW24 and IOW40 use a synchronous call */

- buf = kmalloc(8, GFP_KERNEL); /* 8 bytes are enough for both products */

+ buf = kmalloc(count, GFP_KERNEL);

if (!buf) {

retval = -ENOMEM;

goto exit;