diff --git a/net/core/rtnetlink.c b/net/core/rtnetlink.c
index 9209623ab6445df44757b2541842aa819864b128..c66f60941e5b0a5a4fbd56987b798f6914a2b059 100644
--- a/net/core/rtnetlink.c
+++ b/net/core/rtnetlink.c
@@ -2072,6 +2072,11 @@ static int validate_linkmsg(struct net_device *dev, struct nlattr *tb[])
 		if (tb[IFLA_BROADCAST] &&
 		    nla_len(tb[IFLA_BROADCAST]) < dev->addr_len)
 			return -EINVAL;
+
+		if (tb[IFLA_GSO_MAX_SIZE] &&
+		    (nla_get_u32(tb[IFLA_GSO_MAX_SIZE]) < MAX_TCP_HEADER + 1)) {
+			return -EINVAL;
+		}
 	}
 
 	if (tb[IFLA_AF_SPEC]) {