--- a/sys/dev/drm/amd/amdgpu/amdgpu_kms.c
+++ b/sys/dev/drm/amd/amdgpu/amdgpu_kms.c
@@ -665,6 +665,9 @@
 		if (sh_num == AMDGPU_INFO_MMR_SH_INDEX_MASK)
 			sh_num = 0xffffffff;
 
+		if (info->read_mmr_reg.count > 128)
+			return -EINVAL;
+
 		regs = kmalloc_array(info->read_mmr_reg.count, sizeof(*regs), GFP_KERNEL);
 		if (!regs)
 			return -ENOMEM;