diff --git a/pkgs/by-name/fw/fwupd/package.nix b/pkgs/by-name/fw/fwupd/package.nix
index f1b00d478d60..734a4f07e844 100644
--- a/pkgs/by-name/fw/fwupd/package.nix
+++ b/pkgs/by-name/fw/fwupd/package.nix
@@ -13,6 +13,7 @@
   unstableGitUpdater,
 
   # fwupd
+  fetchpatch2,
   pkg-config,
   pkgsBuildBuild,
 
@@ -147,6 +148,14 @@ stdenv.mkDerivation (finalAttrs: {
     ./0001-Install-fwupdplugin-to-out.patch
     ./0002-Add-output-for-installed-tests.patch
     ./0003-Add-option-for-installation-sysconfdir.patch
+
+    # The memfd seal check added in 2.1.6 rejects any file on tmpfs, since
+    # F_GET_SEALS also works on tmpfs files on recent kernels.
+    # Remove when updating to 2.1.7.
+    (fetchpatch2 {
+      url = "https://github.com/fwupd/fwupd/commit/c2ff6e0bf9e3fea5b8502ed12fdc9ab604a51518.patch";
+      hash = "sha256-Y8YbECfUGqvpNTlKCLOXgRSIZYO+MsZYIMcMgIQfkIs=";
+    })
   ];
 
   postPatch = ''