diff --git a/fs/verity/verify.c b/fs/verity/verify.c
index e77c8b374139a7d2f6f5f565096eab24f800177b..bfcb3d0868ec99b13317591eb4dfb20dcb47ec4c 100644
--- a/fs/verity/verify.c
+++ b/fs/verity/verify.c
@@ -104,7 +104,7 @@ static bool verify_page(struct inode *inode, const struct fsverity_info *vi,
 	pr_debug_ratelimited("Verifying data page %lu...\n", index);
 
 #ifdef CONFIG_SECURITY_CODE_SIGN
-	if (index > (vi->verified_data_size >> PAGE_SHIFT)) {
+	if (index >= DIV_ROUND_UP(vi->verified_data_size, PAGE_SIZE)) {
 		pr_debug_ratelimited("Data out of verity range %lu\n",
 			vi->verified_data_size >> PAGE_SHIFT);
 		return true;