c
< 	cmd_buf = memdup_user(buf, count);
---
> 	if (count > 16) {
> 		return -EINVAL;
> 	}
> 	cmd_buf = memdup_user(buf, count);
