2 files changed, 4 insertions, 4 deletions

diff --git a/net/ipv4/udp.c b/net/ipv4/udp.c
index ced820318f94..c3ecec8a9e1c 100644
--- a/net/ipv4/udp.c
+++ b/net/ipv4/udp.c
@@ -256,7 +256,7 @@ static struct sock *__udp4_lib_lookup(struct net *net, __be32 saddr,
                 int dif, struct udp_table *udptable)
 {
         struct sock *sk, *result;
-        struct hlist_node *node;
+        struct hlist_node *node, *next;
         unsigned short hnum = ntohs(dport);
         unsigned int hash = udp_hashfn(net, hnum);
         struct udp_hslot *hslot = &udptable->hash[hash];
@@ -266,7 +266,7 @@ static struct sock *__udp4_lib_lookup(struct net *net, __be32 saddr,
 begin:
         result = NULL;
         badness = -1;
-        sk_for_each_rcu(sk, node, &hslot->head) {
+        sk_for_each_rcu_safenext(sk, node, &hslot->head, next) {
                 /*
                  * lockless reader, and SLAB_DESTROY_BY_RCU items:
                  * We must check this item was not moved to another chain
diff --git a/net/ipv6/udp.c b/net/ipv6/udp.c
index 1d9790e43dfc..32d914db6c4f 100644
--- a/net/ipv6/udp.c
+++ b/net/ipv6/udp.c
@@ -98,7 +98,7 @@ static struct sock *__udp6_lib_lookup(struct net *net,
                                       int dif, struct udp_table *udptable)
 {
         struct sock *sk, *result;
-        struct hlist_node *node;
+        struct hlist_node *node, *next;
         unsigned short hnum = ntohs(dport);
         unsigned int hash = udp_hashfn(net, hnum);
         struct udp_hslot *hslot = &udptable->hash[hash];
@@ -108,7 +108,7 @@ static struct sock *__udp6_lib_lookup(struct net *net,
 begin:
         result = NULL;
         badness = -1;
-        sk_for_each_rcu(sk, node, &hslot->head) {
+        sk_for_each_rcu_safenext(sk, node, &hslot->head, next) {
                 /*
                  * lockless reader, and SLAB_DESTROY_BY_RCU items:
                  * We must check this item was not moved to another chain