Add required range checks prior to kmalloc()ing socket option buffer space.