diff --git a/net/core/neighbour.c b/net/core/neighbour.c
index 778be5866d0aacb01b4ffa82d6d1cc65da033b3c..3f152075528228cce54e189c32e3bbcda34de1f2 100644
--- a/net/core/neighbour.c
+++ b/net/core/neighbour.c
@@ -855,7 +855,9 @@ static void neigh_periodic_work(struct work_struct *work)
 			if (refcount_read(&n->refcnt) == 1 &&
 			    (state == NUD_FAILED ||
 			     time_after(jiffies, n->used + NEIGH_VAR(n->parms, GC_STALETIME)))) {
-				*np = n->next;
+				rcu_assign_pointer(*np,
+						rcu_dereference_protected(n->next,
+							lockdep_is_held(&tbl->lock)));
 				n->dead = 1;
 				write_unlock(&n->lock);
 				neigh_cleanup_and_release(n);