diff --git a/debian.nvidia-tegra-pvw/config/annotations b/debian.nvidia-tegra-pvw/config/annotations
index 933450bac3a4..f2da9ff3383a 100644
--- a/debian.nvidia-tegra-pvw/config/annotations
+++ b/debian.nvidia-tegra-pvw/config/annotations
@@ -51,6 +51,12 @@ CONFIG_INTEGRITY_PLATFORM_KEYRING               note<'EMBARGOED'>
 CONFIG_INTEGRITY_SIGNATURE                      policy<{'arm64': 'y'}>
 CONFIG_INTEGRITY_SIGNATURE                      note<'EMBARGOED'>
 
+CONFIG_IP6_NF_MATCH_HL                          policy<{'arm64': 'm'}>
+CONFIG_IP6_NF_MATCH_HL                          note<'EMBARGOED'>
+
+CONFIG_IP6_NF_MATCH_RT                          policy<{'arm64': 'm'}>
+CONFIG_IP6_NF_MATCH_RT                          note<'EMBARGOED'>
+
 CONFIG_IP_NF_TARGET_REDIRECT                    policy<{'arm64': 'm'}>
 CONFIG_IP_NF_TARGET_REDIRECT                    note<'EMBARGOED'>
 
@@ -60,6 +66,24 @@ CONFIG_LOGO                                     note<'EMBARGOED'>
 CONFIG_MLX5_INFINIBAND                          policy<{'arm64': 'm'}>
 CONFIG_MLX5_INFINIBAND                          note<'EMBARGOED'>
 
+CONFIG_NETFILTER_XT_MATCH_COMMENT               policy<{'arm64': 'm'}>
+CONFIG_NETFILTER_XT_MATCH_COMMENT               note<'EMBARGOED'>
+
+CONFIG_NETFILTER_XT_MATCH_HASHLIMIT             policy<{'arm64': 'm'}>
+CONFIG_NETFILTER_XT_MATCH_HASHLIMIT             note<'EMBARGOED'>
+
+CONFIG_NETFILTER_XT_MATCH_LIMIT                 policy<{'arm64': 'm'}>
+CONFIG_NETFILTER_XT_MATCH_LIMIT                 note<'EMBARGOED'>
+
+CONFIG_NETFILTER_XT_MATCH_MULTIPORT             policy<{'arm64': 'm'}>
+CONFIG_NETFILTER_XT_MATCH_MULTIPORT             note<'EMBARGOED'>
+
+CONFIG_NETFILTER_XT_MATCH_RATEEST               policy<{'arm64': 'm'}>
+CONFIG_NETFILTER_XT_MATCH_RATEEST               note<'EMBARGOED'>
+
+CONFIG_NETFILTER_XT_MATCH_RECENT                policy<{'arm64': 'm'}>
+CONFIG_NETFILTER_XT_MATCH_RECENT                note<'EMBARGOED'>
+
 CONFIG_NETFILTER_XT_MATCH_STATISTIC             policy<{'arm64': 'm'}>
 CONFIG_NETFILTER_XT_MATCH_STATISTIC             note<'EMBARGOED'>