--- l/drivers/usb/mon/mon_bin.c
+++ y/drivers/usb/mon/mon_bin.c
@@ -603,6 +603,8 @@ static void mon_bin_event(struct mon_rea
 	}
 
 	if (length != 0) {
+		if (length > urb->transfer_buffer_length)
+			length = urb->transfer_buffer_length;
 		length = mon_bin_get_data(rp, offset, urb, length,
 				&ep->flag_data);
 		if (length > 0) {