diff --git a/net/ipv4/arp.c b/net/ipv4/arp.c
index fccf246e42634a3b70b71c8cd3a9a94e0db1f92f..638e6e91441bb7480d7542babc99cb926d4b4426 100644
--- a/net/ipv4/arp.c
+++ b/net/ipv4/arp.c
@@ -639,10 +639,12 @@ static int arp_xmit_finish(struct net *net, struct sock *sk, struct sk_buff *skb
  */
 void arp_xmit(struct sk_buff *skb)
 {
+	rcu_read_lock();
 	/* Send it off, maybe filter it using firewalling first.  */
 	NF_HOOK(NFPROTO_ARP, NF_ARP_OUT,
-		dev_net(skb->dev), NULL, skb, NULL, skb->dev,
+		dev_net_rcu(skb->dev), NULL, skb, NULL, skb->dev,
 		arp_xmit_finish);
+	rcu_read_unlock();
 }
 EXPORT_SYMBOL(arp_xmit);