diff --git a/kernel/cpu.c b/kernel/cpu.c
index 46aefe5c0e35ef2869c3e324b711ed54b3f5b1c1..d9f855cb9f6f97e6ffeb061135649b662b2a3f34 100644
--- a/kernel/cpu.c
+++ b/kernel/cpu.c
@@ -1925,6 +1925,9 @@ static ssize_t write_cpuhp_fail(struct device *dev,
 	if (ret)
 		return ret;
 
+	if (fail < CPUHP_OFFLINE || fail > CPUHP_ONLINE)
+		return -EINVAL;
+
 	/*
 	 * Cannot fail STARTING/DYING callbacks.
 	 */