diff --git a/debian/changelog b/debian/changelog
index 5351a9597..7e037d2c7 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -132,6 +132,8 @@ linux (4.13.13-1) UNRELEASED; urgency=medium
   * net: usb: asix: fill null-ptr-deref in asix_suspend (CVE-2017-16647)
   * net: cdc_ether: fix divide by 0 on bad descriptors (CVE-2017-16649)
   * net: qmi_wwan: fix divide by 0 on bad descriptors (CVE-2017-16650)
+  * nftables: Enable NFT_RT, NFT_SET_BITMAP, NFT_OBJREF as modules
+    (Closes: #881931)
 
  -- Salvatore Bonaccorso <carnil@debian.org>  Sat, 04 Nov 2017 09:54:41 +0100
 
diff --git a/debian/config/config b/debian/config/config
index cea4b05ad..07e33bbda 100644
--- a/debian/config/config
+++ b/debian/config/config
@@ -6723,16 +6723,19 @@ CONFIG_NF_TABLES_INET=m
 CONFIG_NF_TABLES_NETDEV=m
 CONFIG_NFT_EXTHDR=m
 CONFIG_NFT_META=m
+CONFIG_NFT_RT=m
 CONFIG_NFT_NUMGEN=m
 CONFIG_NFT_CT=m
 CONFIG_NFT_SET_RBTREE=m
 CONFIG_NFT_SET_HASH=m
+CONFIG_NFT_SET_BITMAP=m
 CONFIG_NFT_COUNTER=m
 CONFIG_NFT_LOG=m
 CONFIG_NFT_LIMIT=m
 CONFIG_NFT_MASQ=m
 CONFIG_NFT_REDIR=m
 CONFIG_NFT_NAT=m
+CONFIG_NFT_OBJREF=m
 CONFIG_NFT_QUEUE=m
 CONFIG_NFT_QUOTA=m
 CONFIG_NFT_REJECT=m