diff --git a/net/mptcp/options.c b/net/mptcp/options.c
index 6b825fb3fa8322ef4fd96a7a92d02c4ec2bb6628..9b263f27ce9bd35127d165a0001fe85b7b33ac28 100644
--- a/net/mptcp/options.c
+++ b/net/mptcp/options.c
@@ -356,6 +356,8 @@ void mptcp_get_options(const struct sk_buff *skb,
 			length--;
 			continue;
 		default:
+			if (length < 2)
+				return;
 			opsize = *ptr++;
 			if (opsize < 2) /* "silly options" */
 				return;