diff --git a/drivers/android/binder.c b/drivers/android/binder.c
index eec637d..abec538 100644
--- a/drivers/android/binder.c
+++ b/drivers/android/binder.c
@@ -1837,8 +1837,10 @@
 	size_t object_size = 0;
 
 	read_size = min_t(size_t, sizeof(*object), buffer->data_size - offset);
-	if (offset > buffer->data_size || read_size < sizeof(*hdr))
+	if (offset > buffer->data_size || read_size < sizeof(*hdr) ||
+	    !IS_ALIGNED(offset, sizeof(u32)))
 		return 0;
+
 	if (u) {
 		if (copy_from_user(object, u + offset, read_size))
 			return 0;