diff --git a/[refs] b/[refs]
index e1e57ae8dc31..16270258b76b 100644
--- a/[refs]
+++ b/[refs]
@@ -1,2 +1,2 @@
 ---
-refs/heads/master: 339caf2a224fc9af0f01686bf287dda32c6efca6
+refs/heads/master: 99541c23cd32bacf1a591ca537a7c0cb9053ad7e
diff --git a/trunk/kernel/sysctl_check.c b/trunk/kernel/sysctl_check.c
index c09350d564f2..c35da23ab8fb 100644
--- a/trunk/kernel/sysctl_check.c
+++ b/trunk/kernel/sysctl_check.c
@@ -1532,6 +1532,8 @@ int sysctl_check_table(struct nsproxy *namespaces, struct ctl_table *table)
 			sysctl_check_leaf(namespaces, table, &fail);
 		}
 		sysctl_check_bin_path(table, &fail);
+		if (table->mode > 0777)
+			set_fail(&fail, table, "bogus .mode");
 		if (fail) {
 			set_fail(&fail, table, NULL);
 			error = -EINVAL;