diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2021-12-16-ensure-xtables-lock-exists.md b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2021-12-16-ensure-xtables-lock-exists.md
new file mode 100644
index 0000000000..b145ad3fb5
--- /dev/null
+++ b/sdk_container/src/third_party/coreos-overlay/changelog/bugfixes/2021-12-16-ensure-xtables-lock-exists.md
@@ -0,0 +1 @@
+- Ensured that the `/run/xtables.lock` coordination file exists for modifications of the xtables backend from containers (must be bind-mounted) or the `iptables-legacy` binaries on the host ([PR#57](https://github.com/flatcar-linux/init/pull/57))
diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-init/coreos-init-9999.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-init/coreos-init-9999.ebuild
index 131bb83848..e39eb33f96 100644
--- a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-init/coreos-init-9999.ebuild
+++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-init/coreos-init-9999.ebuild
@@ -10,7 +10,7 @@ CROS_WORKON_REPO="https://github.com"
 if [[ "${PV}" == 9999 ]]; then
 	KEYWORDS="~amd64 ~arm ~arm64 ~x86"
 else
-	CROS_WORKON_COMMIT="bf688adbf34cc16b613608a2ee3c4a7f30a54395" # flatcar-master
+	CROS_WORKON_COMMIT="5167ee585e57a66fdba652044267dcb27b765578" # flatcar-master
 	KEYWORDS="amd64 arm arm64 x86"
 fi