diff --git a/libraries/libmesosphere/source/kern_k_server_session.cpp b/libraries/libmesosphere/source/kern_k_server_session.cpp
index f6ab0787c..306ce5979 100644
--- a/libraries/libmesosphere/source/kern_k_server_session.cpp
+++ b/libraries/libmesosphere/source/kern_k_server_session.cpp
@@ -88,7 +88,7 @@ namespace ams::kern {
                             break;
                         case ipc::MessageBuffer::MessageHeader::ReceiveListCountType_ToMessageBuffer:
                             {
-                                const uintptr_t buf = util::AlignUp(this->msg_buffer_end, PointerTransferBufferAlignment);
+                                const uintptr_t buf = util::AlignUp(this->msg_buffer_end + key, PointerTransferBufferAlignment);
 
                                 if ((buf < buf + size) && (buf + size <= this->msg_buffer_space_end)) {
                                     out = buf;