
< struct sk_buff *n = __alloc_skb(newheadroom + skb->len + newtailroom,
---
> size_t new_size;
> if (!size_add_safe(newheadroom, skb->len, &new_size) || !size_add_safe(new_size, newtailroom, &new_size))
>     return NULL;
> struct sk_buff *n = __alloc_skb(new_size,
