diff --git a/net/nfc/nci/core.c b/net/nfc/nci/core.c
index 9e524884d4ac4a0cefd230dea1ff4b90c4ec7f55..8bfc87a6a4f68973f623b95f46b71a97bb8d8cdb 100644
--- a/net/nfc/nci/core.c
+++ b/net/nfc/nci/core.c
@@ -1498,6 +1498,11 @@ static void nci_rx_work(struct work_struct *work)
 		nfc_send_to_raw_sock(ndev->nfc_dev, skb,
 				     RAW_PAYLOAD_NCI, NFC_DIRECTION_RX);
 
+		if (!nci_plen(skb->data)) {
+			kfree_skb(skb);
+			break;
+		}
+
 		/* Process frame */
 		switch (nci_mt(skb->data)) {
 		case NCI_MT_RSP_PKT: