diff --git a/changelog/53353.fixed b/changelog/53353.fixed
new file mode 100644
index 00000000000..cadda5448cc
--- /dev/null
+++ b/changelog/53353.fixed
@@ -0,0 +1 @@
+Ensure when we're adding chunks to the rules when running aggregation with the iptables state module we use a copy of the chunk otherwise we end up with a recursive mess.