diff
<     drv_buf_iter->kern_buf_len = (sizeof(*bsg_reply_buf) - 1 + ...);
---
>     size_t temp_len = (sizeof(*bsg_reply_buf) - 1 + ...);
>     if (temp_len > allocated_buffer_size) {
>         // Handle error due to buffer size overflow
>         return -EINVAL;
>     }
>     drv_buf_iter->kern_buf_len = temp_len;
