1 files changed, 5 insertions, 2 deletions

diff --git a/sys/dev/usb/net/if_smsc.c b/sys/dev/usb/net/if_smsc.c
index 5f2acfbad2c7f..07874efb460fb 100644
--- a/sys/dev/usb/net/if_smsc.c
+++ b/sys/dev/usb/net/if_smsc.c
@@ -1043,8 +1043,11 @@ smsc_bulk_read_callback(struct usb_xfer *xfer, usb_error_t error)
 			
 				/* Finally enqueue the mbuf on the receive queue */
 				/* Remove 4 trailing bytes */
-				if (pktlen >= (4 + ETHER_HDR_LEN))
-					uether_rxmbuf(ue, m, pktlen - 4);
+				if (pktlen < (4 + ETHER_HDR_LEN)) {
+					m_freem(m);
+					goto tr_setup;
+				}
+				uether_rxmbuf(ue, m, pktlen - 4);
 			}
 
 			/* Update the offset to move to the next potential packet */