1 files changed, 3 insertions, 3 deletions

diff --git a/net/sctp/input.c b/net/sctp/input.c
index f2771375bfc0..2277981559d0 100644
--- a/net/sctp/input.c
+++ b/net/sctp/input.c
@@ -322,7 +322,7 @@ int sctp_backlog_rcv(struct sock *sk, struct sk_buff *skb)
                 bh_lock_sock(sk);
 
                 if (sock_owned_by_user(sk) || !sctp_newsk_ready(sk)) {
-                        if (sk_add_backlog(sk, skb, sk->sk_rcvbuf))
+                        if (sk_add_backlog(sk, skb, READ_ONCE(sk->sk_rcvbuf)))
                                 sctp_chunk_free(chunk);
                         else
                                 backloged = 1;
@@ -337,7 +337,7 @@ int sctp_backlog_rcv(struct sock *sk, struct sk_buff *skb)
                         return 0;
         } else {
                 if (!sctp_newsk_ready(sk)) {
-                        if (!sk_add_backlog(sk, skb, sk->sk_rcvbuf))
+                        if (!sk_add_backlog(sk, skb, READ_ONCE(sk->sk_rcvbuf)))
                                 return 0;
                         sctp_chunk_free(chunk);
                 } else {
@@ -364,7 +364,7 @@ static int sctp_add_backlog(struct sock *sk, struct sk_buff *skb)
         struct sctp_ep_common *rcvr = chunk->rcvr;
         int ret;
 
-        ret = sk_add_backlog(sk, skb, sk->sk_rcvbuf);
+        ret = sk_add_backlog(sk, skb, READ_ONCE(sk->sk_rcvbuf));
         if (!ret) {
                 /* Hold the assoc/ep while hanging on the backlog queue.
                  * This way, we know structures we need will not disappear