diff --git a/drivers/net/usb/smsc95xx.c b/drivers/net/usb/smsc95xx.c
index bb4ccbda031a..2666d825a5fa 100644
--- a/drivers/net/usb/smsc95xx.c
+++ b/drivers/net/usb/smsc95xx.c
@@ -73,7 +73,7 @@ MODULE_PARM_DESC(turbo_mode, "Enable multiple frames per Rx transaction");
 static int __must_check __smsc95xx_read_reg(struct usbnet *dev, u32 index,
 					    u32 *data, int in_pm)
 {
-	u32 buf;
+	u32 *buf = kmalloc(4, GFP_KERNEL);
 	int ret;
 	int (*fn)(struct usbnet *, u8, u8, u16, u16, void *, u16);
 
@@ -86,16 +86,17 @@ static int __must_check __smsc95xx_read_reg(struct usbnet *dev, u32 index,
 
 	ret = fn(dev, USB_VENDOR_REQUEST_READ_REGISTER, USB_DIR_IN
 		 | USB_TYPE_VENDOR | USB_RECIP_DEVICE,
-		 0, index, &buf, 4);
+		 0, index, buf, 4);
 	if (unlikely(ret < 0)) {
 		netdev_warn(dev->net, "Failed to read reg index 0x%08x: %d\n",
 			    index, ret);
 		return ret;
 	}
 
-	le32_to_cpus(&buf);
-	*data = buf;
+	le32_to_cpus(buf);
+	*data = *buf;
 
+	kfree(buf);
 	return ret;
 }