1 files changed, 2 insertions, 1 deletions

diff --git a/net/bridge/br_device.c b/net/bridge/br_device.c
index f0f3447e8aa4..861ae2a165f4 100644
--- a/net/bridge/br_device.c
+++ b/net/bridge/br_device.c
@@ -34,11 +34,11 @@ static struct lock_class_key bridge_netdev_addr_lock_key;
 netdev_tx_t br_dev_xmit(struct sk_buff *skb, struct net_device *dev)
 {
         struct net_bridge *br = netdev_priv(dev);
-        const unsigned char *dest = skb->data;
         struct net_bridge_fdb_entry *dst;
         struct net_bridge_mdb_entry *mdst;
         struct pcpu_sw_netstats *brstats = this_cpu_ptr(br->stats);
         const struct nf_br_ops *nf_ops;
+        const unsigned char *dest;
         u16 vid = 0;
 
         rcu_read_lock();
@@ -61,6 +61,7 @@ netdev_tx_t br_dev_xmit(struct sk_buff *skb, struct net_device *dev)
         if (!br_allowed_ingress(br, br_vlan_group_rcu(br), skb, &vid))
                 goto out;
 
+        dest = eth_hdr(skb)->h_dest;
         if (is_broadcast_ether_addr(dest)) {
                 br_flood(br, skb, BR_PKT_BROADCAST, false, true);
         } else if (is_multicast_ether_addr(dest)) {