diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
index 34e5955ab9..f0073f4256 100644
--- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
+++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
@@ -75,3 +75,7 @@ dev-util/checkbashisms
 
 # CVE-2017-1000117
 =dev-vcs/git-2.14.1
+
+# iproute2 4.13 includes a patch to avoid leaking netns mounts in rkt 
+# https://git.kernel.org/pub/scm/linux/kernel/git/shemminger/iproute2.git/commit/?id=d6a4076b6ba6547d7e52c377a7c58c56eb5ea16e
+=sys-apps/iproute2-4.13 ~amd64 ~arm64